Back to results
US 12,632,395 B2Granted
Multi-level independent security architecture
AssigneeSecturion Systems, Inc.
InventorRichard J. Takahashi
Life of this patent
Estimating the term…
Abstract
A system includes a plurality of data input ports, each port corresponding to one of a plurality of different levels of security classification; a security device, configured for cryptographic processing, coupled to receive incoming data from each of the plurality of input ports, wherein the incoming data includes first data having a first classification level; a key manager configured to select and tag-identified first set of keys from a plurality of key sets, each of the key sets corresponding to one of the different levels of security classification, wherein the first set of keys is used by the security device to encrypt the first data; and a common encrypted data storage, coupled to receive the encrypted first data from the security device for storage.
Claims24
A system comprising:
- a data input port configured to receive first and second data packets, the first data packet including a first tag corresponding to a first level of security classification and the second data packet including a second tag corresponding to a second level of security classification different from the first level of security classification;
- at least one key manager configured to select, using the first tag, a first set of keys from a plurality of key sets, the first set of keys corresponding to the first level of security classification, and to select, using the second tag, a second set of keys from the plurality of key sets, the second set of keys corresponding to the second level of security classification;
- a first security device, configured for cryptographic processing for the first level of security classification exclusive of the second level, comprising a first cryptographic module configured to process the first data packet using the first set of keys;
- a second security device, configured for cryptographic processing for the second level of security classification exclusive of the first level, comprising a second cryptographic module configured to process the second data packet using the second set of keys;
- and
- wherein the first and second data packets are processed for writing over a network into a common external data storage.
3 more elements
A method comprising:
- receiving incoming data including first and second data packets, the first data packet including a first tag corresponding to a first level of security classification, and the second data packet including a second tag corresponding to a second level of security classification;
- selecting a first set of keys using the first tag, the first set of keys corresponding to the first level of security classification;
- selecting a second set of keys using the second tag, the second set of keys corresponding to the second level of security classification;
- encrypting, using a first cryptographic module configured for cryptographic processing for the first level exclusive of the second level, the first data packet using the first set of keys;
- encrypting, using a second cryptographic module configured for cryptographic processing for the second level exclusive of the first level, the second data packet using the second set of keys;
- and
- writing, over a network, the encrypted first and second data packets into a common data storage.
4 more elements
A device comprising:
- a data port configured to receive first and second data packets, the first data packet including a first tag corresponding to a first level of security classification and the second data packet including a second tag corresponding to a second level of security classification different from the first level of security classification;
- a plurality of cryptographic modules, configured for cryptographic processing, including a first cryptographic module configured for cryptographic processing for the first level exclusive of the second level and a second cryptographic module configured for cryptographic processing for the second level exclusive of the first level, the first cryptographic module processing the first data packet and the second cryptographic module processing the second data packet;
- and
- an interface configured to send the processed first and second data packets for writing over a network to a common storage device.
1 more element
A device comprising:
- at least one input port configured to receive data packets having different levels of security classification;
- at least one field-programmable gate array (FPGA) or processing device configured to encrypt each of the data packets using at least one respective key, and to send each encrypted data packet for writing to a common storage device, wherein the respective key corresponds to one of the different levels of security classification;
- and
- an interface configured to send each encrypted data packet over a network to the common storage device.
1 more element
Dependencies are inferred from the claim text.