General Dynamics Advanced Information Systems, Inc.

General Dynamics Information Systems, Inc.

General Dynamics Information Systesm, Inc.

Patrick L Sullivan

Nathan J Hastad

Clarence R Mackley

Terrance A Dilling

William O'Donnell

Robert Pedersen

Basil Chambers

The disclosure relates to a trusted interface unit and a method of making and using the same. According to one embodiment of the present invention, a method of transmitting data on a network may include receiving data from a partition within a node on the network. This node may be configured to transmit data associated with a number of sensitivity levels. According to one embodiment of the invention, these sensitivity levels may be classification levels. One method of transmission of data may include determining the identity of the partition that originated the data within the node. Furthermore, a label may be added to the data received from within the node and the data may be encrypted with a key that may be uniquely associated with the label on the data. After encryption, the data may be transmitted on the network. Additional methods including the reception of data are disclosed. Various node and network architectures are disclosed implementing the methods and apparatus of the present invention.

Trusted interface unit (TIU) and method of making and using the same

A method and apparatus for real-time in-line encryption of data transmitted over a serial channel from a source device to a target device. An encryption unit includes logic configured to receive data packets including headers with control information and data on the channel, which may be a fiber channel bus, serial ATA, serial SCSI, USB or the like. The encryption unit encrypts the data and passes the control information to the target device along with the encrypted data. The encryption unit may filter, convert or reject predetermined commands or types of information in the header to prevent covert channel transmissions. There may be one or multiple source devices, e.g. host computers, and one or multiple target devices, e.g. storage systems, configured in a variety of network topologies. The encryption unit also decrypts data and remaps control information transmitted from the target device(s) to the source device(s).

Method and apparatus for in-line serial data encryption

An array module containing an array of electronic units is mounted in an installation frame. The electronic units can be mounted by rails in a hermetically sealed array housing and blind-mate connectors can connect the units to a rear plate. Blind-mate connectors also can connect the rear plate to the installation frame for external connection. A plurality of resilient mounts are fastened to the installation frame to protect the frame and storage array module from external shock. A thermal transfer mechanism transfers thermal energy between the electronic units and a region exterior to the installation frame. The electronic units can be enclosed in hermetically sealed chambers having side rails for rigidly fastened to the unit and a resilient support connecting the side rails to at least one of the covers of the hermetically sealed chamber. Thermal rails can be permanently mounted by a plurality of resilient thermal conductors to either the side rails or one of the covers, and a fastener removably mounts the thermal rails to the other of the side rails or one of the covers so that the thermal rails and resilient thermal conductors provide conduction of thermal energy between the side rails and one of the covers.

Data storage housing

Growing community of inventors

Minnetonka, MN, United States of America

Patrick L Sullivan