Loading patent…
AssigneeTrusted Computer Solutions
InventorsDavid Adams, Bryan Ericson, Chad Hanson, George Kamis, James Maple, Victor Serbe, Venkatesh Yekkirala
Estimating the term…
A trusted relabeler system and software is provided that allows for the simultaneous reclassification of multiple files to multiple classification labels (security domains or computer networks) through automation of the multi-person review process. Roles, used to break down the requirements of the multi-person review process, dictate what specific function a user can perform. There are three roles used: Submitter, Processor, and Reviewer. The Submitter is allowed to submit one or more documents for reclassification, while the Processor is allowed to submit one or more documents for reclassification, perform an initial review and acceptance of the document, and assign a specific Reviewer for the document. The Reviewer is allowed to perform final verification and, upon acceptance, allows the document to be reclassified appropriately. Users are assigned one or more roles and a set of source and destination classification labels inside the security policy of a specific user that are bounded (restricted) by the clearance (maximum classification) assigned to a user on the trusted operating system on which the trusted relabeler system is implemented. The bundled documents to be reclassified are virus scanned, file typed, and searched for “dirty words” indicative of a particular classification level. An integrity seal is generated to verify that the files are not tampered with between processing by the Processor and the Reviewer. Files are upgraded or downgraded only if all processes are completed successfully.
A system for relabeling documents from one security classification level to another, comprising a processor and software implemented on said processor, said software including:
A method of relabeling documents from one security classification level to another, comprising the steps of:
A method as in claim 212, wherein said dirty word searching step includes the steps of identifying non-alphanumeric characters and searching for matches in a list of clean and dirty non-alphanumeric characters.
A computer readable medium comprising:
A method of determining if a file to be processed has a particular file type, comprising the steps of decomposing the file to a native file, analyzing the native file to determine the type of content in the native file using at least one signature based tool, examining a file extension contained in a name of the file, and if both the file type and file extension are allowed based on predetermined security policies, allowing the file to be further processed, otherwise, rejecting processing of the file.
A method of searching a file for words that must be validated before the file may be relabeled to a new classification level, comprising the steps of:
Dependencies are inferred from the claim text.