公开(公告)号：US20230087954A1

公开(公告)日：2023-03-23

申请号：US18054110

申请日：2022-11-09

Applicant: OPSWAT Inc.

Inventor： John CURRY ,  Tzvetan CHALIAVSKI ,  Cosmin BANCIU

IPC: G06F21/53

Abstract: A method includes transmitting data by a first interface card in a trusted domain. A second interface card in an untrusted domain receives the data. The second interface card stores the data in a first memory location of a plurality of first memory locations in the untrusted domain and verifies integrity of the data. The second interface card writes a result of the verifying in a second memory location of a plurality of second memory locations in the untrusted domain. The first interface card retrieves the result of the verifying from the second memory location of the plurality of second memory locations in the untrusted domain. The first interface card creates a table configured to identify and track a state of the second memory location of the plurality of second memory locations in the untrusted domain corresponding to the data received from the first interface card in the trusted domain.

公开(公告)号：US20220174047A1

公开(公告)日：2022-06-02

申请号：US17651387

申请日：2022-02-16

Applicant: OPSWAT Inc.

Inventor： John CURRY ,  Tzvetan CHALIAVSKI ,  Cosmin BANCIU

IPC: H04L9/40 ,  H04L12/46 ,  H04L1/16

Abstract: A method includes a processor in a trusted domain receiving a first request having a plurality of messages for a device in an untrusted domain. The processor assigns a memory location having data segments and status segments. The memory location is accessible by an untrusted side interface card. The processor transmits a first message to a first data segment. The processor receives a first value associated with the first message from a first status segment. The processor determines whether the first value indicates that the first message has been received and stores a first representation of a successful data transmission. The processor transmits a second message to a second data segment. The processor retrieves a second value from the second status segment. The processor determines whether the second value indicates that the second message has been received and stores a second representation of the successful data transmission.