Qinetiq Limited

Katherine Jane Hughes

Simon Robert Wiseman

A system for automated checking of data content includes content checkers () to () arranged in parallel and connected between an input sub-system () and an output sub-system (). The content checkers () to () check different data formats. Incoming data from an external computer system () is passed by the input sub-system () to the checkers () to (), which report check results to both input and output sub-systems () and (). From the four check results, the input sub-system () judges the data's acceptability for forwarding to a sensitive computer system (). Unacceptable data is discarded; acceptable data passes to the output sub-system (), which also judges the data's acceptability from the four check results. The output sub-system () only receives such data if the check results are all positive or if the input sub-system () malfunctions: in the latter case the check results are not all positive, and the output sub-system () will not forward the data unless it also malfunctions. The decision to forward data is therefore split between the input and output sub-systems () and ().

Checking data content

A data content checker arrangement for protecting communication between a sensitive computer system () and an external computer system (). The arrangement includes a store () connected to input and output sub-systems () and () and to content checkers () and () arranged in parallel. The input and output sub-systems () and () are connected to the external computer system () and the sensitive computer system () respectively. Data received from the external computer system () is encrypted by the input sub-system () using an encryption key to which the content checkers () and () have access. The content checkers () and () can therefore decrypt, read and check the data. If the data passes a content checker's checks, the checker digitally signs and stores it, decrypted, in the store (); if the checks are not passed, the checker discards the data. The output sub-system () delivers data to the sensitive computer system () if the data has received both content checkers' digital signatures indicating acceptability.

Growing community of inventors

Malvern, United Kingdom

Katherine Jane Hughes