Back to results
US 9,805,195 B1Granted
System and method for transferring files between computer systems using information invariant data transformation
AssigneeThe Boeing Company
InventorsJames Joseph Bonang, Marco Anthony Corrado, Michael Cohen Hogan, Kevin Dale Singer
Life of this patent
Estimating the term…
Abstract
Systems and methods using Information-invariant Data Transformation (IIDT) in the transfer of files from an un-trusted to a trusted computer system are disclosed. The IIDT alters the data representation of information, without altering the meaning of the information to a degree that is perceptible to a human consumer of that information. The data transformation operations eliminate embedded malware thereby providing secure transfer of files between the un-trusted and trusted computer systems.
Claims21
A file transfer system configured to transfer files from an un-trusted computer system to a trusted computer system, the file transfer system comprising:
- volatile memory;
- and
- a processing system configured to:
- load a file from the un-trusted computer system into the volatile memory;
- if the file is a text file, convert the text file to a converted file comprising a marked-up version of the text file using a markup language;
- apply information-invariant data transformation (IIDT) operations to the converted file in the volatile memory, the IIDT operations comprising redacting metadata from the converted file and applying a random steganography operation to the converted file, the random steganography operation comprising:
- generating entropy for seeding a random data generator, the entropy generated by recording environmental noise associated with the un-trusted computer;
- generating random data for one or more comments based on the generated entropy, the random data comprising random characters, the one or more comments having a random length;
- formatting the one or more comments in the markup language of the converted file;
- and
- inserting the one or more comments at random locations within the converted file;
- and
- make the transformed file available in a persistent storage that is accessible by the trusted computer system.
10 more elements
A computer system comprising:
- an un-trusted computer system;
- a trusted computer system;
- and
- a file transfer system configured to apply information-invariant data transformation (IIDT) operations on files received from the un-trusted computer system, the files comprising text files that are converted to converted files comprising marked-up versions of the text files using a markup language, wherein the IIDT operations comprise redacting metadata from the converted files and applying a random steganography operation to the converted files, the random steganography operation comprising:
- generating entropy for seeding a random data generator, the entropy generated by recording environmental noise associated with the un-trusted computer;
- generating random data for one or more comments based on the generated entropy, the random data comprising random characters, the one or more comments having a random length;
- formatting the one or more comments in the markup language of the converted file;
- and
- inserting the one or more comments at random locations within the converted file,
- wherein the IIDT operations are executed in a first memory storage area, wherein the file transfer system is further configured to make the transformed file available in a second memory storage area that is accessible by the trusted computer system, and wherein the first memory storage area is isolated from the second memory storage area.
7 more elements
A method for secure file transfer comprising:
- loading a file from an un-trusted computer system into a first memory storage area;
- if the file is a text file, converting the text file to a converted file comprising a marked-up version of the text file using a markup language;
- applying information-invariant data transformation (IIDT) operations on the file in the first memory storage area, the IIDT operations comprising redacting metadata from the file and applying a random steganography operation to the converted file, the random steganography operation comprising:
- generating entropy for seeding a random data generator, the entropy generated by recording environmental noise associated with the un-trusted computer;
- generating random data for one or more comments based on the generated entropy, the random data comprising random characters, the one or more comments having a random length;
- formatting the one or more comments in the markup language of the converted file;
- and
- inserting the one or more comments at random locations within the converted file;
- and
- making the transformed file available in a second memory storage area that is accessible by a trusted computer system, wherein the first memory storage area is isolated from the second memory storage area.
7 more elements
Dependencies are inferred from the claim text.