发明名称 |
High-assurance architecture for routing of information between networks of differing security level |
摘要 |
The present invention is directed to routing information between networks of differing security level. Communication to/from each network is handled by a dedicated Offload Engine (OE). Each OE interfaces to a Guard Engine through a Guard Data Mover (GDM) and includes an interface for connecting to an external network. A first OE receives a data packet from a first network intended to be transmitted to a second network. The Guard Engine analyzes the data packet. The Guard Engine includes an ACL (Access Control List) which are rules data packets must meet before being passed onto a destination network. If allowed, the Guard Engine delivers the data packet to the second network via a second OE utilizing a GDM associated with the first OE and a GDM associated with the second OE. The architecture of the present invention reduces the time and effort needed to attain high-assurance certification.
|
申请公布号 |
US8161529(B1) |
申请公布日期 |
2012.04.17 |
申请号 |
US20070820351 |
申请日期 |
2007.06.19 |
申请人 |
BORTZ MARK A.;WILDING MATTHEW M.;MAREK JAMES A.;HARDIN DAVID S.;HIRATZKA T. DOUGLAS;LIMONDIN PHILIPPE M. T.;ROCKWELL COLLINS, INC. |
发明人 |
BORTZ MARK A.;WILDING MATTHEW M.;MAREK JAMES A.;HARDIN DAVID S.;HIRATZKA T. DOUGLAS;LIMONDIN PHILIPPE M. T. |
分类号 |
H04L29/06 |
主分类号 |
H04L29/06 |
代理机构 |
|
代理人 |
|
主权项 |
|
地址 |
|