This invention relates generally to communication networks and more particularly to multiple independent levels of security networks.
Communication networks provide the ability to transfer, retrieve and access data. A problem associated with communication networks known to the art is security. For example, conventional communication networks may be subject to interception of data. A solution for data interception is encryption whereby transferred data is encrypted prior to transport and decrypted upon retrieval of the data at the desired destination. A problem associated with encryption of data is the significant increase in overhead to the communication network.
Additionally, conventional communication systems require separate and unique hardware for transmission of data across distinct classification domains. For example, the present Fibre Channel standard architecture requires “top secret” processing, nodes, switches, graphics and secret instantiations and unclassified instantiations. Maintaining such separation in a closed computing platform causes significant overhead in components and costs because separate hardware and components are required for each classification domain.
Multiple independent levels of security (MILS) networks provide multiple levels of security for transfer of data. A MILS network is a highly assured communication system which may separate security mechanisms and concerns into manageable components. Advantageously, MILS networks may provide for secure separation of data into levels without the requirement of full message encryption. Additionally, MILS networks may reduce the number of switches, and may support additional levels of integration through a MILS real-time operating system (RTOS) while not requiring full encryption of data.
Referring to
Consequently, a MILS network system which maintains secure separation of data and secure data transfer while reducing the requirement of customized hardware is necessary.
Accordingly, the present invention is directed to a MILS network system employing functional separation of messages without customized switches. Advantageously, the MILS network system of the present invention may maintain separation of data while eliminating a requirement of full message encryption. In an embodiment of the invention, a function may be employed whereby a keyed digest of a message is created. The function may receive a message and a key, and may emit a keyed digest value. The key may be representative of a particular level of security, thus promoting the separation of data. Messages may include an embedded keyed digest when sent through a switch to a MILS node. At the MILS node, the keyed digest may be recalculated, if it matches, the message may be passed to the host.
It is to be understood that both the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the invention claimed. The accompanying drawings, which are incorporated in and constitute a part of the specification, illustrate an embodiment of the invention and together with the general description, serve to explain the principles of the invention.
Those numerous objects and advantages of the present invention may be better understood by those skilled in the art by reference to the accompanying figures in which:
Reference will now be made in detail to presently preferred embodiments of the invention, examples of which are illustrated in the accompanying drawings.
Referring to
Messages which are passed between hosts 210, 220 may be embedded with a keyed digest. A keyed digest system may operate to ensure separation of the data without the requirement of a MILS switch. A transmitted message may be embedded with a keyed digest, may pass through the switch 270 and the receiving MILS node may receive the message with the embedded keyed digest. For example, host 210 may transfer a message through MILS node 230. The message may be passed through the keyed digest system via the MILS node 230. The output of the keyed digest system may be a message with an embedded keyed digest. Switch 270 may transfer the message to MILS node 240. MILS node 240 may recalculate the keyed digest via the keyed digest system and may compare the calculated keyed digest with the results of the received keyed digest. If the calculated keyed digest matches the received keyed digest, the message may be passed to the host 220. If the calculated keyed digest does not match the received keyed digest, the message may not be passed. Additionally, the message may be flagged and an error condition may be logged.
Referring to
Keyed digest systems of MILS nodes 230, 240 of
In an advantageous aspect of the present invention, all nodes 230, 240 of the MILS network 200 of
Referring to
It is believed that the present invention and many of its attendant advantages will be understood by the foregoing description, and it will be apparent that various changes may be made in the form, construction, and arrangement of the components thereof without departing from the scope and spirit of the invention or without sacrificing all of its material advantages. The form herein before described being merely an explanatory embodiment thereof, it is the intention of the following claims to encompass and include such changes.
Number | Name | Date | Kind |
---|---|---|---|
4159468 | Barnes et al. | Jun 1979 | A |
4160120 | Barnes et al. | Jul 1979 | A |
6478581 | Lin | Nov 2002 | B1 |
6941460 | Carro et al. | Sep 2005 | B2 |
20020013794 | Carro et al. | Jan 2002 | A1 |
20020198848 | Michener | Dec 2002 | A1 |
20040008669 | Bos et al. | Jan 2004 | A1 |
20050132070 | Redlich et al. | Jun 2005 | A1 |
20050138110 | Redlich et al. | Jun 2005 | A1 |