Parallel cross-domain guard engines with sequential cryptographic controls
US11296876B1 · kind B1 · utility
Assignee
Inventor
Key dates
| Filing date | Sep 11, 2020 |
| Grant date | Apr 5, 2022 |
| Priority date | — |
| Expiry date | Oct 13, 2040 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04L9/34
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
A system and method for cross-domain parallel inspection of data packets in transit between domains of differing security classification incorporating sequential cryptographic control is disclosed. In embodiments, the system includes first and second random number generators, each generating a one-time pad for transmission to both a corresponding front-end cryptographic engine and a parallel guard engine. The cryptographic engines double encrypt the data packet in sequence according to the one-time pads, storing the encrypted packet in a holding register. Each guard engine inspects the data packet in parallel, indicating approval by transmitting a release to the holding register and sending its one-time pad to a back-end cryptographic engine. When the holding register receives both releases, the double encrypted packet is sequentially decrypted by the back-end cryptographic engines in reverse order according to the one-time pads received from the guard engines. The fully decrypted data packet is transferred to the second domain.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.