Back to results
US 2009/0158050 A1Published application
Trusted Labeler
AssigneeViaSat, Inc.
InventorsRichard L. Quintana, John R. Owens, John C. Andolina, Stuart N. Shanken
Life of this patent
Estimating the term…
Abstract
A cryptographic device and method are disclosed for processing different levels of classified information. Input and output ports are physically isolated on the cryptographic device. Within the cryptographic device, each port has its packets labeled in such a way that it can be processed differently from other packets by a cryptographic module. High-assurance techniques are used to assure labeling and proper processing of the packets. These labeled packets are intermixed on common pathways regardless of level of classification. Despite intermixing, separation of the packets is assured through the process.
Claims24
A cryptographic device for processing classified information having a plurality of different classification levels, the cryptographic device comprising:
- a first input port;
- a first input labeler coupled to the first input port, wherein the first input labeler labels first packets from the first input port with first input label information associated with the first input port;
- a second input port physically isolated from the first input port;
- a second input labeler coupled to the second input port, wherein the second input labeler labels second packets from the second input port with second input label information associated with the second input port, and further wherein the first input label information is distinguishable from the second input label information;
- an input label checker between the first and/or second input labelers and a cryptographic module, wherein the input label checker checks if the first input labeler has labeled the first packets with the first label information and/or checks if the second input labeler has labeled the second packets with the second label information;
- the cryptographic module coupled to the input labelers and configured to process the first and second packets wherein:
- the cryptographic module uses the first and second input label information to distinguish the first packets from the second packets, and
- the cryptographic module produces a first processed packet from the first packet and a second processed packet from the second packet;
- a first output port;
- a second output port physically isolated from the first output port;
- a router coupled to the cryptographic module that receives the first and second processed packets on a common datachannel, wherein:
- the router divides out the first processed packets from the second processed packets according to output labels, wherein the output labels of the first processed packets comprise information indicating that the first processed packets are destined for the first output port and the output labels of the second processed packets comprise information indicating that the second processed packets are destined for the second output port,
- the router couples the first processed packets to the first output port without including the second processed packets, and
- the router couples the second processed packets to the second output port without including the first processed packets;
- and
- an output label checker between the router and the first and/or second output ports that checks if the output labels of the first processed packets comprise the information indicating that the first processed packets are destined for the first output port and/or checks if the output labels of the second processed packets comprise the information indicating that the second processed packets are destined for the second output port.
13 more elements
A cryptographic device for processing information divided into partitions in a high-assurance manner, the cryptographic device comprising:
- a first input port;
- a first input labeler coupled to the first input port, wherein the first input labeler labels first packets from the first input port;
- a second input port physically isolated from the first input port;
- a second input labeler coupled to the second input port, wherein the second input labeler labels second packets from the second input port;
- a cryptographic module coupled to the input and output labelers to process the first and second packets according to input label, wherein:
- different processing algorithms are used for the first and second packets to produce a first processed packet and a second processed packet, and
- the cryptographic module uses label to distinguish the first packets from the second packets;
- a first output port;
- a second output port physically isolated from the first output port;
- a router coupled to the cryptographic module that receives the first and second processed packets on a common datachannel, wherein:
- the router divides out the first processed packets from the second processed packets according to output label,
- the router couples the first processed packets to the first output port without including the second processed packets, and
- the router couples the second processed packets to the second output port without including the first processed packets.
10 more elements
A method for cryptographically processing information in a high-assurance manner, the method comprising steps of:
- receiving a first packet on a first input port;
- labeling the first packet to produce a labeled first packet;
- checking that labeling the first packet step was performed properly;
- transporting the labeled first packet on an input port to a cryptographic module;
- processing the labeled first packet with the cryptographic module to produce a processed first packet;
- transporting the processed first packet with the output port of the cryptographic module;
- receiving a second packet on a second input port;
- labeling the second packet to produce a labeled second packet;
- checking that labeling the second packet step was performed properly;
- transporting the labeled second packet with the input port to the cryptographic module;
- processing the labeled second packet with the cryptographic module to produce a processed second packet;
- transporting the processed second packet with the output port of the cryptographic module;
- separating the processed first packet and the processed second packet;
- checking labeling on the processed first packet to confirm that the processed first packet is intended for a first output port;
- coupling information from the processed first packet to the first output port;
- checking labeling on the processed second packet to confirm that the processed second packet is intended for a second output port;
- and
- coupling information from the processed second packet to the second output port.
15 more elements
Dependencies are inferred from the claim text.