Access control for air-gapped computer systems

A computer-implemented method for access control for executing commands on air-gapped computer systems, the computer-implemented method comprising:

• determining whether a role-based access control system permits a user to execute a command on an air-gapped computer system, in response to receiving a request from the user to execute the command;
• prompting a number of approvers to determine whether to approve of the user executing the command, in response to a determination that the role-based access control system permits the user to execute the command;
• encoding the command and incorporating the encoded command in an encoded message, in response to a determination that a required number of approvers have approved of the user executing the command;
• communicating, by a simplex communication output device, the encoded message to a simplex communication input device for the air-gapped computer system;
• and
• enabling execution of the command by one of requesting the air-gapped computer system to execute the command, and providing the user with an access token, received from the air-gapped computer system, which enables the user to physically access the air-gapped computer system and execute the command.

A computer program product, comprising a non-transitory computer-readable medium having a computer-readable program code embodied therein to be executed by one or more processors, the program code including instructions to:

• determine whether a role-based access control system permits a user to execute a command on an air-gapped computer system, in response to receiving a request from the user to execute the command;
• prompt a number of approvers to determine whether to approve of the user executing the command, in response to a determination that the role-based access control system permits the user to execute the command;
• encode the command and incorporate the encoded command in an encoded message, in response to a determination that a required number of approvers have approved of the user executing the command;
• communicate, by a simplex communication output device, the encoded message to a simplex communication input device for the air-gapped computer system;
• and
• enable execution of the command by one of requesting the air-gapped computer system to execute the command, and providing the user with an access token, received from the air-gapped computer system, which enables the user to physically access the air-gapped computer system and execute the command.