公开(公告)号：US10791091B1

公开(公告)日：2020-09-29

申请号：US15895897

申请日：2018-02-13

Applicant: Architecture Technology Corporation

Inventor： Clint Sanders ,  Ranga S. Ramanujan ,  Timothy Hartley

IPC: H04L29/06 ,  H04L12/18 ,  H04L12/761

Abstract: Disclosed is a high assurance unified switching device corresponding to a modular, standards-compliant extensible network switch supporting multiple security domains with data isolation of multiple data packets obtained from the multiple security domains. The device may comprise an inner layer router and an outer layer security wrapper (outer layer router). The ports on the outer layer router are configured for different security domains and assigned corresponding key pairs. The ports use the assigned key pairs for encrypting data packets prior to routing and decrypt the data after routing such that there is an isolation of data packets of different security domains. A routed packet arriving at the wrong port cannot be decrypted and therefore is dropped.

公开(公告)号：US11792160B1

公开(公告)日：2023-10-17

申请号：US17032871

申请日：2020-09-25

Applicant: ARCHITECTURE TECHNOLOGY CORPORATION

Inventor： Clint Sanders ,  Ranga S. Ramanujan ,  Timothy Hartley

IPC: H04L29/06 ,  H04L9/40 ,  H04L12/18 ,  H04L45/16

CPC classification number: H04L63/0218 ,  H04L9/40 ,  H04L12/18 ,  H04L45/16 ,  H04L63/0485 ,  H04L63/0853 ,  H04L63/162

Abstract: Disclosed is a high assurance unified switching device corresponding to a modular, standards-compliant extensible network switch supporting multiple security domains with data isolation of multiple data packets obtained from the multiple security domains. The device may comprise an inner layer router and an outer layer security wrapper (outer layer router). The ports on the outer layer router are configured for different security domains and assigned corresponding key pairs. The ports use the assigned key pairs for encrypting data packets prior to routing and decrypt the data after routing such that there is an isolation of data packets of different security domains. A routed packet arriving at the wrong port cannot be decrypted and therefore is dropped.