System and method for the secure unidirectional transfer of software and software updates

摘要

A system is disclosed that provides an authenticated payload, e.g., a software program or update, to a recipient device. A storage device stores a payload. A provider server coupled to the storage device outputs the payload and a manifest table. The manifest table includes information identifying the payload. A manifest engine TX server receives the payload and the manifest table from the provider server, generates information about the received payload, compares the information generated about the payload with the contents of the received manifest table, and, if the information about the received payload matches information for a particular one of the at least one payloads included in the received manifest table, forwards the payload to a one-way data link. The output of the one-way data link is coupled to a manifest engine RX server, which in turn forwards any received payload to a recipient device coupled to an output of the manifest engine RX server.

主权项

1. A system for providing an authenticated payload to a recipient device, comprising:
a storage device for storing at least one payload; a provider server coupled to the storage device and configured to output a particular one of the at least one payloads and a manifest table, the manifest table including information identifying each of the at least one payloads; a manifest engine TX server coupled to the provider server, the manifest engine TX server configured to receive the particular payload from the provider server, to receive the manifest table from the provider server, to generate information about the received payload, to compare the information generated about the payload with the contents of the received manifest table, and, if the information about the received payload matches information for a particular one of the at least one payloads included in the received manifest table, to forward the payload on an output; a data link having an input coupled to the output of the manifest engine TX server and an output; a manifest engine RX server having an input coupled to the output of the data link and an output, and configured to forward any payload received at the input to the output; and a recipient device coupled to the output of the manifest engine RX server and configured to receive any payload output by the manifest engine RX server.