US 5,828,832 AGranted

Mixed enclave operation in a computer network with multi-level network security

AssigneeITT Industries, Inc.

InventorsJames M. Holden, Stephen E. Levin, Edwin H. Wrench, Jr., David W. Snow, deceased

Life of this patent

Estimating the term…

Loading patent…

Abstract

A method is disclosed for mixed enclave operation of a computer network with users employing a multi-level network security interface and users without any network security interface. Either the network security user selects or the network security interface automatically selects whether communications are permissible with other unsecured users. Where a mixed enclave operation is selected, the network security user identifies when communications are being undertaken with another secured user or a non-secured user. Communications with a non-secured user at a lower security level entail securing the data residing with the secured user from transmission back to the non-secured user.

Claims20

Dependent claims

A method for communicating on a network having a secured plurality of users utilizing multi-level network security devices, each multi-level network security device being operable in a first and second mode, respectively, and an unsecured plurality of users employing no network security devices, said method comprising the steps of:

sending a communication from any first user;
intercepting said communication by a first multi-level network security device;
discarding said communication if said communication violates security parameters associated with said first multi-level network security device;
and,
in said first mode, sending said communication from said first multi-level network security device to any second user;
and,
in said second mode, encrypting said communication using said first multi-level network security device, sending said encrypted communication to a second multi-level network security device, decrypting said communication using said second multi-level network security device, and sending said decrypted communication from said second multi-level network security device to a third user selected from said secured plurality of users.

4 more elements

Dependencies are inferred from the claim text.