System and method for cryptologically tethering user devices to one another in adaptable manner for trusted communication across untrusted network

A trusted system for cryptologically secured communication in adaptable manner between remotely disposed trusted devices operating within respective trusted environments separated by an untrusted environment, comprising:

• a plurality of encrypting devices respectively coupled to different trusted devices, corresponding ones of said encrypting devices being mutually paired to establish a uniquely dedicated communication link therebetween across the untrusted environment, said encrypting devices being thereby cryptologically tethered;
• at least one of said encrypting devices having a multi-channel configuration defining a plurality of encryption channels;
• wherein each of said encrypting devices includes a processor and memory, and each of said communication links established between mutually paired encrypting devices maintains logical and physical isolation between the trusted and untrusted environments in a manner independent of any communication protocol of the untrusted environment;
• and,
• wherein each of said encrypting devices defines a portal for traversing a trust boundary between trusted and untrusted environments, and each of said encrypting devices includes:
• at least one encryption unit configured to encrypt data traffic for transmission and decrypt received encrypted data traffic;
• and,
• at least one communication unit coupled to said encryption unit by a connectionless interconnect, said communication unit being configured to transmit and receive encrypted data traffic through a corresponding communication link.

A high assurance method for cryptologically tethered communication in adaptable manner between first and second user devices operating within respective trusted environments separated by an untrusted environment, comprising:

• establishing at least one set of first and second main encrypting devices coupled respectively to the first and second user devices, said first and second main encrypting devices each having a processor and memory;
• mutually pairing said first and second main encrypting devices to establish a uniquely dedicated main communication link therebetween across the untrusted environment;
• establishing at least one auxiliary encrypting device coupled to an auxiliary device operating within a trusted environment, said auxiliary encrypting device having a processor and memory;
• mutually pairing said first main encrypting device and said auxiliary encrypting device to establish a uniquely dedicated auxiliary communication link therebetween across the untrusted environment;
• and,
• establishing said main and auxiliary communication links between mutually paired encrypting devices to maintain logical and physical isolation between the trusted and untrusted environments in a manner independent of any communication protocol of the untrusted environment, said main and auxiliary communication links thereby defining a portal traversing a trust boundary between the trusted and untrusted environments;
• and,
• wherein each of said main and auxiliary encrypting devices:
• executes at least one encryption unit to encrypt message data for transmission and decrypt received encrypted message data;
• and,
• executes at least one communication unit coupled to said encryption unit by a connectionless interconnect to transmit and receive encrypted message data through a corresponding one of said main and auxiliary communication links.