Secure remote desktop
AssigneeWaterfall Security Solutions Ltd.
InventorsLior Frenkel, Andrew Ginter
Life of this patent
Estimating the term…
Abstract
A method for communication includes receiving in a secure installation via a network from a remote user terminal an input comprising a stream of symbols that has been encrypted using a preselected encryption key. The encrypted stream of symbols is decoded in the secure installation using a decryption key corresponding to the preselected encryption key, to produce a clear stream of symbols. A computer program running on a processor in the secure installation is used in processing the symbols in the clear stream and generating a graphical output in a predefined display format in response to processing the symbols. The graphical output is outputted from the secure installation to the network in an unencrypted format for display on the remote user terminal.
Claims23
A method for communication, comprising:
- receiving in a secure installation via a network from a remote user terminal an input comprising a stream of symbols that has been encrypted using a preselected encryption key;
- decoding the encrypted stream of symbols in the secure installation using a decryption key corresponding to the preselected encryption key, to produce a clear stream of symbols;
- inputting the clear stream of symbols via a first one-way link to a processor in the secure installation;
- using a computer program running on the processor in the secure installation, processing the symbols in the clear stream and generating a graphical output in a predefined display format in response to processing the symbols;
- and
- outputting the graphical output from the secure installation via a second one-way link to the network in an unencrypted format for display on the remote user terminal.
(canceled)
Communication apparatus for deployment in a secure installation, the apparatus comprising:
- an input interface, which is configured to receive via a network from a remote user terminal outside the secure installation an input comprising a stream of symbols that has been encrypted using a preselected encryption key;
- a decoder, which is coupled to receive the encrypted stream of symbols from the interface and configured to decrypt the encrypted stream using a decryption key corresponding to the preselected encryption key, to produce a clear stream of symbols;
- a computer, which is configured to run a software program that causes the computer to process the symbols in the clear stream and to generate a graphical output in a predefined display format in response to processing the symbols;
- a first one-way link, coupled to convey the clear stream of symbols from the decoder to the computer;
- an output interface, which is configured to convey the graphical output to the network in an unencrypted format for display on the remote user terminal;
- and
- a second one-way link, coupled to convey the graphical output from the computer to the output interface.
(canceled)
A method for communication, comprising:
- receiving in a secure installation via a network from a remote user terminal an input comprising a stream of symbols that has been encrypted using a preselected encryption key;
- decoding the encrypted stream of symbols in the secure installation using a decryption key corresponding to the preselected encryption key, to produce a clear stream of symbols;
- inputting the clear stream of symbols via a first one-way link to a processor in the secure installation;
- using a computer program running on a processor in the secure installation, processing the symbols in the clear stream and generating a graphical output in a predefined display format in response to processing the symbols;
- and
- outputting the graphical output from the secure installation via a second one-way link to the network for display on the remote user terminal.
Communication apparatus for deployment in a secure installation, the apparatus comprising:
- an input interface, which is configured to receive via a network from a remote user terminal outside the secure installation an input comprising a stream of symbols that has been encrypted using a preselected encryption key;
- a decoder, which is coupled to receive the encrypted stream of symbols from the interface and configured to decrypt the encrypted stream using a decryption key corresponding to the preselected encryption key, to produce a clear stream of symbols;
- a computer, which is configured to run a software program that causes the computer to process the symbols in the clear stream and to generate a graphical output in a predefined display format in response to processing the symbols;
- a first one-way link, coupled to convey the clear stream of symbols from the decoder to the computer;
- an output interface, which is configured to convey the graphical output to the network for display on the remote user terminal;
- and
- a second one-way link, coupled to convey the graphical output from the computer to the output interface.
Dependencies are inferred from the claim text.