초록 ▼

A system and method for the secure transfer of data between a workstation connected to a private network and a remote computer connected to an unsecured network. A secure computer is inserted into the private network to serve as the gateway to the unsecured network and a client subsystem is added to

A system and method for the secure transfer of data between a workstation connected to a private network and a remote computer connected to an unsecured network. A secure computer is inserted into the private network to serve as the gateway to the unsecured network and a client subsystem is added to the workstation in order to control the transfer of data from the workstation to the secure computer. The secure computer includes a private network interface connected to the private network, an unsecured network interface connected to the unsecured network, wherein the unsecured network interface includes means for encrypting data to be transferred from the first workstation to the remote computer, a server function for transferring data between the private network interface and the unsecured network interface and a filter function for filtering data transferred between the remote computer and the workstation.

대표청구항 ▼

[ What is claimed is:] [1.] A system for secure internetwork communication across an external network, the system comprising:first and second internal networks;first and second secure computers connected to the external network, wherein said first and second secure computers are type enforcing secur

[ What is claimed is:] [1.] A system for secure internetwork communication across an external network, the system comprising:first and second internal networks;first and second secure computers connected to the external network, wherein said first and second secure computers are type enforcing secure computers capable of recognizing data of varying sensitivity and of limiting access to data based on both user access rights and process access rights and wherein the first and second secure computers include:an internal network interface; andan external network interface for secure transfer of data from the first secure computer to the second secure computer over the external network, wherein the external network interface includes means for encrypting data to be transferred from the first secure computer to the second secure computer;a first computing system, wherein the first computing system includes a first client subsystem connected over the first internal network to the internal network interface of the first secure computer, wherein the first client subsystem includes means for secure transfer of data between the first computing system and the first secure computer; anda second computing system, wherein the second computing system includes a second client subsystem connected over the second internal network to the internal network interface of the second secure computer, wherein the second client subsystem includes means for secure transfer of data between the second computing system and the second secure computer.