US 7,607,167 B1Granted

Secure gateway/router

AssigneeRockwell Collins, Inc.

InventorsTony L. Johnson, Greg L. Shelton

Life of this patent

Estimating the term…

Loading patent…

Abstract

The present invention is directed to a secure gateway/router system and method for allowing a MLS network which simultaneously contains data of multiple security levels to interface with one of several MSLS networks which is configured to maintain data with a single security level. When the data is within the secure gateway/router system, the separation of the data by security levels, as it was received from the MLS network, is maintained by routing the data to a designated security level network. Secure gateway/router system includes several network interface units. Each network interface unit is configured to interface within a single MSLS network. Each MSLS software partition has a single and simple function to perform in maintaining separation of security levels and provide the data to the network interface unit configured to interface within the designated security level network.

Claims29

Dependent claims

A secure gateway system, comprising:

a Multiple Independent Levels of Security (MILS) router processor for bi-directional routing of a data packet based on a security level extracted from the data packet compared to a security level associated with a software partition within the router processor;
the MILS router processor further including an MILS router application, the MILS router application including a Multiple Levels Security (MLS) network interface software partition, a MLS router software partition, a first Multiple Single-Level Security (MSLS) software partition configured to securely interface with a first MSLS network, a second MSLS software partition configured to securely interface with a second MSLS network, a third MSLS software partition configured to securely interface with an unclassified network;
and a MILS Real Time Operating System (RTOS) for controlling the bidirectional routing of a data packet;
a channel coupled to the MILS router processor and a MLS network, the channel for transferring the data packet between the MLS network and the MILS router processor;
and
a plurality of network interface units for interfacing between the MILS router processor and a plurality of MSLS networks;
wherein the plurality of MSLS networks include the first MSLS network, the second MSLS network and the unclassified network.

4 more elements

Dependencies are inferred from the claim text.