Systems, methods and devices for secure routing and recording of network data transported through network switch
AssigneeOvsecure Ltd.
InventorOleg Vaisband
Life of this patent
Estimating the term…
Abstract
The disclosure relates to systems, methods and devices for secure routing and recording of network data streams passing through a network switch. Specifically, the disclosure relates to systems, methods and devices for reversibly deconstructing networks' OSI L1-L7 in time and space, in the process of selectively recording network data streams for secure access, as well as providing external rule-based security auditing and functioning as a black-box in industry-specific applications.
Claims31
A system for secure network routing and data recording comprising:
- a. a communication processing module;
- b. a secure hardware module operably coupled to the communication processing module;
- c. a network switch in two-way communication with the communication processing module;
- d. a non-volatile memory module in two-way communication with the communication processing module;
- and
- e. a central processing unit coupled to a transceiver, the central processing unit having thereon a processor-readable medium coupled to a memory having thereon a set of instructions configured to transmit and receive data from the communication processing module,
- wherein the secure hardware module is adapted to provide a selectably reversible temporospatial disconnect among the network's:
- data link layer, and/or network layer, and/or transport layer, and/or application layer and/or a combination of the foregoing.
A method for secure routing and recording of network data stream passing through a network switch implementable in a system comprising a communication processing module, a secure hardware module operably coupled to the communication processing module, a network switch having a plurality of network ports in two way communication with the communication processing module, a non-volatile memory module in two way communication with the communication processing module, and a central processing unit coupled to a transceiver, the central processing unit having thereon a processor-readable medium coupled to a memory having thereon a set of instructions configured to transmit and receive data from the communication processing module, wherein the secure hardware module is adapted to provide a selectably reversible, temporospatial disconnect among the network's:
- data link layer, and/or network layer, and/or transport layer, and/or application layer and/or a combination of the foregoing, the method comprising
- a. receiving a network data stream through the network ports to the network switch;
- b. based on predetermined criteria, routing the network data stream or portions thereof to the communication processing module via a data conduit;
- c. using the communication processing module, processing the network data stream or portion thereof thereby recording the network data stream;
- and
- d. storing the recorded network data stream or portion thereof on the non-volatile memory module.
An apparatus for providing secure routing and recording of a network data stream passing through a network switch, the apparatus comprising:
- a network switch, circuitry, a secure hardware module operably coupled to a communication processing module, and the communication processor in communication with a non-volatile memory having thereon processor-readable firmware, the communication processor and circuitry adapted to provide a selectably reversible, temporospatial disconnect among the network's:
- data link layer, and/or network layer, and/or transport layer, and/or application layer and/or a combination of the foregoing.
Dependencies are inferred from the claim text.