High assurance authorization device

摘要

Methods and apparatus are provided for securing the transfer of data over the internet from malicious interference. The apparatus comprises a computing device and a data storage device in operable communication with the computing device. The apparatus also includes a set of high assurance security instructions resident on the data storage device and executing within the computing device and at least one input/output interface. The method comprises receiving data via a first communication interface and storing the data in a memory device and initiating an unsecured data indication. The method also provides for receiving an authentication code via the first communication interface and decoding the authentication code and determining the authenticity of the data. If the authentication code fails to indicate authenticity then the data is deleted. If the authentication code indicates authenticity, then the data is transferred to a destination device via a second communication interface.

主权项

1. A system for securing the transferring of data over the internet from malicious interference, comprising:
a low security assurance unit (LSLAU) in wireless communication with the internet, wherein the LSLAU is configured to receive from the internet a database and a signed hash associated with the database, wherein the signed hash is an encoded form of an original hash generated from the database, and wherein the LSLAU is configured to perform a hashing function with the database to re-obtain the original hash; a high assurance authorization device (HAAD) in operable communication with the LSLAU, wherein the HAAD is configured to receive from the LSLAU the signed hash, the original hash and the database, wherein the HAAD is configured to decode the signed hash to obtain a decoded hash, and wherein the HAAD is configured to compare the decoded hash with the original hash; and an on-board avionics data loader in operable communication with the HAAD; wherein when the decoded hash matches the original hash, the HAAD is further configured to load database to an avionics network with the on-board avionics data loader.