System and method for information sharing between non-secure devices

A method for communicating information packets from a first host system operating in a first security domain and in accordance with a non-secure communications protocol, using a dataguard, to a second host system operating in a second security domain different than said first security domain, and where said second host system is also operating in accordance with said non-secure communications protocol, the method comprising:

• transferring an information packet from the first host system to a first proxy task group of the dataguard using a first driver interfaced to the first proxy task group, where said first driver operates in accordance with said non-secure communications protocol;
• using the dataguard to create a filter that binds to said first proxy task group to receive and filter all subsequently received information packets from said first host system, to generate filtered information packets;
• binding the filter to a second proxy task group, with the second proxy task group being interfaced to a second driver that operates in said non-secure communications protocol;
• using the second proxy task group to communicate said filtered information packets to said second host via said second driver;
• and
• wherein the dataguard further operates to:
• use a file storage system to directly receive and store said filtered information packets from the filter together with a new file name supplied by the filter;
• use the filter to send to notify the second proxy task group of the new file name;
• cause the second proxy task group to use the new file name to retrieve the filtered information packets from the file storage system;
• deleting said information packets from said file storage system after said filter has written said new filtered message to said file storage system;
• and
• wherein said using the dataguard to create a filter includes using the dataguard to create a filter in accordance with a previously defined support file.

A method for communicating information packets from a first host system operating in a first security domain and in accordance with a non-secure communications protocol, using a dataguard, to a second host system operating in a second security domain different than said first security domain, and where said second host system is also operating in accordance with said non-secure communications protocol, the method comprising:

• transferring an information packet from the first host system to a first proxy task group of the dataguard using a first driver operating in said first security domain, and in accordance with said non-secure communications protocol;
• using the first proxy task group to assign a name to said information packet when said information packet is received by said dataguard, to store the received information packet in a file, and to use a file name associated with the received information packet to identify all further received information packets having said file name;
• creating a filter for the file name, the filter operating to filter information contained in information packets subsequently transmitted from said first host system that have a name that matches said filter name created by said filter;
• binding the filter with the first proxy task group and also with a second proxy task group of the dataguard, with the second proxy task group being associated with said second security domain, so that the filter receives all subsequently transmitted information packets from said first host system that have said file name, and is able to communicate with said second proxy task group;
• using the filter to receive the stored information packet and to filter the stored information packet to create a filtered information packet in accordance said non-secure communications protocol;
• using the filter to delete the stored information packet from the file system;
• using the filter to transmit the filtered information packet to a file system;
• using the filter to assign a new file name to the filtered information packet and to transmit the new file name to said second proxy task group and to said file system;
• using the second proxy task group to obtain said filtered information packet from said file system using said new file name;
• using the second proxy task group to communicate said filtered information packet to a second driver operating in accordance with said non-secure communications protocol associated with said second host system;
• deleting said information packets from said file system after said filter has written said filtered information packet to said file system;
• and
• wherein said creating a filter includes using the dataguard to create a filter in accordance with a previously defined support file.

A system for communicating information packets from a first host system operating in a first security domain and in accordance with a non-secure communications protocol, to a second host system operating in a second security domain that is different from said first security domain, and where said second host system is in accordance with a non-secure communications protocol, the system comprising:

• a dataguard implemented on a processor;
• a first driver included to form a portion of the dataguard, and forming an interface between said dataguard and said first host system, said first driver configured to operate in accordance with said non-secure communications protocol;
• a second driver forming an interface between said dataguard and said second host system, said second driver also configured to operate in accordance with said non-secure communications protocol;
• said dataguard including proxy task groups that further assist in interfacing said first and second host systems to said dataguard;
• and
• said dataguard including:
• a filter that binds to said proxy task groups and is adapted to filter received information packets from said first host system having a given packet name, and to generate filtered information packets identified by corresponding new packet names, the filter further being configured to forward the filtered information packets to a file system of the dataguard, together with new packet names for said filtered information packets, and further to transmit said new packet names to said second driver via one of said proxy task groups for subsequent transmission to said second host system in accordance with said non-secure communications protocol;
• deleting said information packets from said file system after said filter has written said filtered information packets to said file system;
• and
• wherein said dataguard creates said filter in accordance with a previously defined support file.