US 9,426,652 B2Granted

High assurance authorization device

OwnerJoseph Nutaro, Daniel P. Johnson +1inventors

InventorsJoseph Nutaro, Daniel P. Johnson, Robert Olson

Life of this patent

Estimating the term…

Loading patent…

Abstract

Methods and apparatus are provided for securing the transfer of data over the internet from malicious interference. The apparatus comprises a computing device and a data storage device in operable communication with the computing device. The apparatus also includes a set of high assurance security instructions resident on the data storage device and executing within the computing device and at least one input/output interface. The method comprises receiving data via a first communication interface and storing the data in a memory device and initiating an unsecured data indication. The method also provides for receiving an authentication code via the first communication interface and decoding the authentication code and determining the authenticity of the data. If the authentication code fails to indicate authenticity then the data is deleted. If the authentication code indicates authenticity, then the data is transferred to a destination device via a second communication interface.

Claims6

Dependent claims

A system for securing the transferring of data over the internet from malicious interference, comprising:

a low security assurance unit (LSLAU) in wireless communication with the internet, wherein the LSLAU is configured to receive from the internet a database and a signed hash associated with the database, wherein the signed hash is an encoded form of an original hash generated from the database, and wherein the LSLAU is configured to perform a hashing function with the database to re-obtain the original hash;
a high assurance authorization device (HAAD) in operable communication with the LSLAU, wherein the HAAD is configured to receive from the LSLAU the signed hash, the original hash and the database, wherein the HAAD is configured to decode the signed hash to obtain a decoded hash, and wherein the HAAD is configured to compare the decoded hash with the original hash;
and
an on-board avionics data loader in operable communication with the HAAD;
wherein when the decoded hash matches the original hash, the HAAD is further configured to load database to an avionics network with the on-board avionics data loader.

2 more elements

Dependencies are inferred from the claim text.

Facts

Application: 12/915,769Filed 29 Oct 2010 · us provisional application
Priority: 9 Sep 2010
Published: US 2012/0066751 A115 Mar 2012
Granted: 23 Aug 2016
Term ends: Not estimatedThe source records don’t support an estimate.

Classification7 codes

H04W 12/06
Security arrangements; Authentication; Protecting privacy or anonymity: authentication
G06F 21/606
Protecting data: by securing the transmission between two devices or processes
G06F 21/64
Protecting data: protecting data integrity, e.g. using checksums, certificates or signatures
H04L 63/123
Applying verification of the received information: received data contents, e.g. message integrity