US 11,122,010 B2Granted

Data hub for a cross-domain communication system

AssigneeQinetiq Limited

InventorMichael Iain Jobson

Life of this patent

Estimating the term…

Loading patent…

Abstract

Some embodiments are directed to a cross-domain communication system and method. The system includes a data hub connectable to first domain and to a second domain, the first and second domains being isolated from one another. The data hub may be connected independently to the first domain and to the second domain, such that it is able to receive data from the first domain and transmit data to the second domain. The data hub includes a processor, and optionally a data diode, the processor being adapted to inspect packet data received from the first domain, and to run a set of user-defined rules, such that commands are applied to the packet data in accordance with the rules. When a command applied to packet data received from the first domain it creates packet data transmittable to the second domain in real time, such that the first and second domains communicate indirectly via the data hub.

Claims29

Dependent claims

A data hub for providing a connection between at least first and second discrete domains, the domains being used to simulate or model the performance and interaction of a plurality of different entities, the data hub being connected independently to the first domain and to the second domain, such that the data hub is able to receive data from the first domain and transmit data to the second domain, the data hub comprising:

a processor adapted to inspect data packets received from the first domain, each packet containing information relating to only one of the different simulated or modeled entities, and to run a set of user-defined rules, and
at least some of the user-defined rules having one or more conditions associated with the at least some of the user-defined rules, and
at least some of the user-defined rules modify the data packets associated with different simulated or modeled entities in different ways so as to obfuscate details of the simulated or modeled entity to which the packet relates, according to the one or more conditions associated with each rule of the at least some of the user-defined rules, to create filtered packet data transmittable to the second domain in real time;
and
a data diode, arranged to receive filtered data from the processor, and to transmit the filtered data to the second domain;
and
the set of user-defined rules includes at least one rule being of a BLOCK type rule, which prevents data to which such BLOCK type rule applies from being passed to the second domain;
the set of user-defined rules includes at least one rule being of a SET type rule, which applies global overrides to a particular set of data, regardless of original values from source data;
the set of user-defined rules includes at least one rule being of an ALLOW type rule, which allows data, which is subject to the ALLOW type rule, to be passed through if particular conditions are met;
and
the set of user-defined rules includes at least one rule being of a THROTTLE type rule, which restricts rate of data throughput.

8 more elements

A method of cross-domain communication between at least first and second discrete domains, the domains being used to simulate or model the performance and interaction of a plurality of different entities, comprising:

receiving data packets from the first domain;
inspecting the data packets received from the first domain, each packet containing information relating to only one of the different simulated or modeled entities;
and
running a set of user-defined rules having at least one condition associated with each rule of the set of user-defined rules, to modify the data packets associated with different simulated or modeled entities in different ways so as to obfuscate details of the simulated or modeled entity to which the packet relates;
and transmitting the modified data packets in real time to the second domain;
and
the set of user-defined rules includes at least one rule being of a BLOCK type rule, which prevents data to which such BLOCK type rule applies from being passed to the second domain;
the set of user-defined rules includes at least one rule being of a SET type rule, which applies global overrides to a particular set of data, regardless of original values from source data;
the set of user-defined rules includes at least one rule being of an ALLOW type rule, which allows data, which is subject to the ALLOW type rule, to be passed through if particular conditions are met;
and
the set of user-defined rules includes at least one rule being of a THROTTLE type rule, which restricts rate of data throughput.

8 more elements

Dependencies are inferred from the claim text.

Facts

Application: 15/777,902Filed 10 Nov 2016
Priority: GB 152038019 Nov 2015
Published: US 2018/0351914 A16 Dec 2018
Granted: 14 Sep 2021
Term ends: Not estimatedThe source records don’t support an estimate.

Classification9 codes

H04L 63/0227
For separating internal from external traffic, e.g. firewalls: filtering policies
H04L 41/145
Network analysis or design: involving simulating, designing, planning or modelling of a network
H04L 63/0209
For separating internal from external traffic, e.g. firewalls: architectural arrangements, e.g. perimeter networks or demilitarized zones
H04L 63/0245
Filtering policies: filtering by information in the payload

Family

US 2018/0351914 A1Pre-grant publication · published 6 Dec 2018
US 11,122,010 B2This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key