Method and apparatus for generating a figure of merit for use in transmission of messages in a multi-level secure environment

An apparatus that generates a figure of merit for use in transmission of messages in a multi-level secure environment, comprising:

• a communication interface that facilitates the sending and receiving of messages;
• a data provenance information analysis unit that receives a message through the communication interface having a data provenance wrapper, examines each data provenance record of the message and any attachments for discrepancies, identifies any discrepancies in the examination of each data provenance record of the message and any attachments,
• a figure of merit generator that determines if the message is to be transmitted to a recipient across a security domain, wherein if the figure of merit generator determines that the message is to be transmitted to a recipient across a security domain, the figure of merit generator determines if the data provenance information can be transmitted with the message across the security domain, wherein if the figure of merit generator determines that the data provenance information cannot be transmitted with the message across the security domain, the figure of merit generator generates a figure of merit based on objective and subjective information, substitutes the figure of merit for the data provenance information, and transmits the figure of merit with the message across the security domain using the communication interface,
• wherein the message may or may not have attachments and the data provenance wrapper contains a data provenance record with data provenance information for the message and each attachment,
• wherein in the examination of each data provenance record of the message and any attachments, the data provenance information analysis unit verifies signatures of senders of the message and any attachments, calculates a hash value for the message and any attachments, verifies that the hash value for the message and any attachments matches the values in the data provenance record for the message and any attachments, verifies the timestamp of the message and any attachments, and verifies information assurance attributes of the message and any attachments, the information assurance attributes being at least one of authenticity, confidentiality, integrity, non-repudiation, and availability, and
• wherein the objective and subjective information includes at least one of information assurance attributes, certificate of authority confidence information, and workflow component confidence information.

A computer-readable medium storing instructions for generating a figure of merit for use in transmission of messages in a multi-level secure environment, the instructions comprising:

• receiving a message having a data provenance wrapper, wherein the message may or may not have attachments and the data provenance wrapper contains a data provenance record with data provenance information for the message and each attachment;
• examining each data provenance record of the message and any attachments for discrepancies, wherein the examination of each data provenance record of the message and any attachments includes:
• verifying signatures of senders of the message and any attachments;
• calculating a hash value for the message and any attachments;
• verifying that the hash value for the message and any attachments matches the values in the data provenance record for the message and any attachments;
• verifying the timestamp of the message and any attachments;
• and
• verifying information assurance attributes of the message and any attachments, the information assurance attributes being at least one of authenticity, confidentiality, integrity, non-repudiation, and availability;
• identifying any discrepancies in the examination of each data provenance record of the message and any attachments;
• determining if the message is to be transmitted to a recipient across a security domain, wherein if it is determined that the message is to be transmitted to a recipient across a security domain,
• determining if the data provenance information can be transmitted with the message across the security domain, wherein if it is determined that the data provenance information cannot be transmitted with the message across the security domain,
• generating a figure of merit based on objective and subjective information, wherein the objective and subjective information includes at least one of information assurance attributes, certificate of authority confidence information, and workflow component confidence information;
• substituting the figure of merit for the data provenance information;
• and
• transmitting the figure of merit with the message across the security domain.