# US 11,444,919 B2 · Mission critical security zone

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 11,444,919 B2
- Document ID: US11444919B2
- Status: Granted
- Kind: B2
- Application number: 16/417,063
- Filed: 2019-05-20
- Published: 2020-11-26
- Granted: 2022-09-13
- Earliest claimed: 2019-05-20
- Assignees: Woodward, Inc.
- Applicants: Woodward, Inc.
- Inventors: Jacob A. de Bes
- Web page: https://patentgrep.com/patent/US11444919B2

## CPC

- H04L 63/0209: {Architectural arrangements, e.g. perimeter networks or demilitarized zones}
- H04L 63/0227: {Filtering policies (mail message filtering H04L51/212)}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

The subject matter of this specification can be embodied in, among other things, a computer system that includes a first processor system configured to communicate with a network, a second processor system configured to control a process, and a third processor system configured to selectively operate in a first configuration and a second configuration, wherein the third processor system is configured to selectively block predetermined types of communications from the first processor system to the second processor system in the first configuration, and the third processor system is configured to permit the predetermined types of communications from the first processor system to the second processor system in the second configuration.

## Claims

### Claim 1

A computer system comprising:
a first processor system configured to communicate with a network;
a second processor system configured to control a process; and
a third processor system comprising a physical selector configured as a user input, arranged as a communications relay between the first processor system and the second processor system and configured to determine a physical configuration of the user input and selectively operate in a first configuration and a second configuration based on the physical configuration of the user input, wherein the third processor system is configured to identify communications comprising information configured to alter operations of the second processor system and selectively block relay of predetermined types of communications from the first processor system to the second processor system in the first configuration, and the third processor system is configured to relay the predetermined types of communications from the first processor system to the second processor system in the second configuration; wherein the third processor system comprises a field programmable gate array (FPGA) device.

### Claim 2 (depends on 1)

The computer system of claim 1, wherein the physical selector is in electrical communication with the third processor system.

### Claim 3 (depends on 1)

The computer system of claim 1, wherein the user input is located in physical proximity to the at least one of the second processor system and the third processor system.

### Claim 4 (depends on 1)

The computer system of claim 1, wherein the predetermined types of communications comprise communications that can cause a change in operations of the second processor system.

### Claim 5 (depends on 1)

The computer system of claim 1, wherein the third processor system is further configured to reply to the predetermined types of communications when operating in the first configuration.

### Claim 6

A non-transitory computer storage medium encoded with a computer program, the computer program comprising instructions that when executed by a data processing apparatus cause the data processing apparatus to perform operations comprising:
receiving a first user input indicative of a user selection of a first mechanical configuration;
determining, by the data processing apparatus, a first operational condition based on the first mechanical configuration of a physical selector;
receiving, by the data processing apparatus and from a first processing system, a first communication comprising information configured to alter operations of a second processing system;
blocking, by the data processing apparatus and based on the first operational condition, relay of the first communication by the data processing apparatus to the second processing system;
receiving a second user input indicative of a user selection of a second mechanical configuration of the physical selector;
determining, by the data processing apparatus, a second operational condition based on the second mechanical configuration of the physical selector;
receiving, by the data processing apparatus and from the first processing system, a second communication comprising information configured to alter operations of the second processing system; and
relaying, by the data processing apparatus and based on the second operational condition, the second communication to the second processing system.

### Claim 7 (depends on 6)

The non-transitory computer storage medium of claim 6, the operations further comprising:
receiving, by the data processing apparatus and from the first processing system, a third communication comprising information not configured to alter operations of the second processing system; and
relaying, by the data processing apparatus, the third communication to the second processing system in the first operational condition or the second operational condition.

### Claim 8 (depends on 6)

The non-transitory computer storage medium of claim 6, wherein the first user input is based on actuation of the physical selector to the first mechanical configuration, and the second user input is based on actuation of the physical selector to the second mechanical configuration.

### Claim 9 (depends on 6)

The non-transitory computer storage medium of claim 6, the operations further comprising sending, based on the first operational condition, a third communication comprising a response to the first communication.

### Claim 10 (depends on 6)

The non-transitory computer storage medium of claim 6, the operations further comprising determining that the first communication comprises information configured to alter operations of the second processing system.

### Claim 11 (depends on 6)

The non-transitory computer storage medium of claim 6, wherein the data processing apparatus comprises a field-programmable gate array (FPGA) device, and the computer program comprises an FPGA configuration.

### Claim 12

A computer security apparatus comprising:
an electrical circuit comprising a processor, a first communications port, a second communications port, and a selection port, and a physical selector in electrical communication with the selection port and configured to provide a first state based on a first physical configuration of the physical selector and provide a second state based on a second physical configuration of the physical selector, and configured to:
receive, by the processor, a selection signal at the selection port, wherein the selection signal comprises the first state indicative of the first physical configuration of the physical selector and the second state indicative of the second physical configuration of the physical selector;
receive, by the processor at the first communications port, communications comprising information configured to alter operations of a processing system;
block, by the processor and based on the first state, relay of the communications by the processor from the first communications port to the second communications port; and
relay, by the processor and based on the second state, the communications from the first communications port to the second communications port.

### Claim 13 (depends on 12)

The computer security apparatus of claim 12, wherein the physical selector is in physical proximity to at least one of the electrical circuit and a computer system configured to communicate with the second communication port.

### Claim 14 (depends on 12)

The computer security apparatus of claim 12, wherein the electrical circuit is further configured to identify communications received at the first communications port as communications comprising information configured to alter operations of the processing system.

### Claim 15 (depends on 12)

The computer security apparatus of claim 12, wherein the electrical circuit is further configured to transmit, based on the first state, replies to communications received at the first communications port and comprising information configured to alter operations of the processing system.

### Claim 16 (depends on 12)

The computer security apparatus of claim 12, wherein the processor comprises a field programmable gate array (FPGA) device.

### Claim 17

A method for securing a computer system, the method comprising:
receiving a first user input indicative of a user selection of a first mechanical configuration of a physical selector;
determining, by a first processing system, a first operational condition based on the first mechanical configuration of the physical selector;
receiving, by the first processing system and from a second processing system, a first communication comprising information configured to alter operations of a third processing system;
blocking, by the first processing system and based on the first operational condition, the first communication from being relayed by the first processing system to the third processing system;
receiving a second user input indicative of a user selection of a second mechanical configuration of the physical selector;
determining a second operational condition based on the second mechanical configuration of the physical selector;
receiving, from the second processing system, a second communication comprising information configured to alter operations of the third processing system; and
relaying, by the first processing system and based on the second operational condition, the second communication to the third processing system.

### Claim 18 (depends on 17)

The method of claim 17, further comprising:
receiving, by the first processing system and from the second processing system, a third communication comprising information not configured to alter operations of the third processing system; and
relaying, by the first processing system, the third communication to the third processing system in the first operational condition or the second operational condition.

### Claim 19 (depends on 17)

The method of claim 17, wherein the first user input is based on actuation of the physical selector to the first mechanical configuration, and the second user input is based on actuation of the physical selector to the second mechanical configuration.

### Claim 20 (depends on 17)

The method of claim 17, the operations further comprising sending, based on the first operational condition, a third communication comprising a response to the first communication.

### Claim 21 (depends on 17)

The method of claim 17, the operations further comprising determining that the first communication comprises information configured to alter operations of the third processing system.