Thales

Eric Weber

Laurent Frerebeau

Fabien Alcouffe

Benoît Maximilien

Jean-Marc Lacroix

Antoine Quentin

David Granjard

A security apparatus positioned between at least one domain having a level of trust or of sensitivity A and at least one domain having a level of trust or sensitivity B, bearing in mind that the level A is different from the level B, comprises a virtualization software layer V implemented on the physical layer H and positioned between said physical layer H and at least one set consisting of at least three different compartmentalized blocks having different sensitivity levels, BLA, BLB, MDS. The compartmentalized blocks rest on the physical layer H and the virtualization layer and the blocks include at least one of: a network block A, BLA, comprising all the network functions used to process data of security level A, a network block B, BLB, comprising all the network functions used to process data of security level B, and a security module software block, MDS, or airlock positioned between at least one block of BLA type and at least one block of BLB type, said security module being designed to monitor the exchanges of data between said blocks BLA and BLB, said security module comprising all the security, filtering or cryptographic function transformations.

Security apparatus

A system, apparatus and a method to connect at least two items of equipment, a first item of equipment having a first confidentiality level and a second item of equipment having a second confidentiality level, the two items of equipment in communication with equipment external to the system through the use of a protocol wherein the system includes at least: a medium allowing the transmission of data between the first and second items of equipment; an interface between the medium and the first item of equipment; an interface between the medium and the second item of equipment; first module to allow a first monodirectional adaptation of the protocol and to allow the transmission of data monodirectionally; and a second module to allow a second monodirectional adaptation of the protocol and to allow a reception of the data monodirectionally from the first module.

Secured system for transferring data between two equipments

A system and method for marking and controlling the transfer of information between several users (). An authority () marks information to be transmitted. A directory () or device containing the certificates of all users as well as the certificates of all the components of the architecture. A security office () is used to, a key management device () and a privilege management device ().

Growing community of inventors

Cormeilles en Vexin, France

Eric Weber