Multi-Function, Modular System for Network Security, Secure Communication, and Malware Protection

An apparatus comprising:

• an input-output connector coupleable to a data network;
• a first network interface circuit coupleable to a first PCIe communication line for communication with a host computing system, the first network interface further having at least one communication port;
• a nonvolatile memory storing a configuration bit image;
• and
• a field programmable gate array coupled to the input-output connector and to the nonvolatile memory, the field programmable gate array further coupled to the first network interface circuit through the at least one communication port, the field programmable gate array further coupleable to a second PCIe communication line for communication with the host computing system, the field programmable gate array configurable using the configuration bit image to appear solely as a communication device to the first network interface circuit when coupled to the at least one communication port, the field programmable gate array further configurable using the configuration bit image for only a partial implementation of a communication protocol, and the field programmable gate array configurable to bidirectionally monitor all data packets transferred between the input-output connector and the first network interface circuit and any coupled host computing system.

A network interface circuit board comprising:

• an input-output connector coupleable to a data network;
• at least one first PCIe communication line;
• at least one PCIe connector to couple the at least one first PCIe communication line to a host computing system;
• a first network interface circuit coupleable to the first PCIe communication line for communication with a host computing system, the first network interface further having at least one communication port;
• a nonvolatile memory storing a configuration bit image;
• and
• a field programmable gate array coupled to the input-output connector and to the nonvolatile memory, the field programmable gate array further coupled to the first network interface circuit through the at least one communication port, the field programmable gate array configurable using the configuration bit image to appear solely as a communication device to the first network interface circuit when coupled to the at least one communication port, the field programmable gate array configurable to bidirectionally monitor all data packets transferred between the input-output connector and the first network interface circuit and any coupled host computing system.