Sierra Nevada Corporation

Peter Fischer

Kevin Jeffrey Streander

Kyle Andrew Shepard

Joshua A Edwards

Andrew Feldkamp

Nelson Rodriguez

Joshua S Edwards

Sarah Kooiman

Maxwell O Greenstein

Nathan Gang

Brandon Boldenow

Christopher Poupore

Kyle P Werner

Daniel Payne

A communication system utilizing unified gateways bridges communication gaps between data transmitters having differing transmission, security, data format, overhead restrictions and performance metrics by dynamically determining optimal data paths for the data being routed. The unified gateways can also dynamically alter data packages to upgrade/downgrade security standards, alter transmission networks, translate data to match recipient requirements and split/combine data to optimize data throughput using disparate systems.

Unified communication gateway systems

A live virtual constructive (LVC) gateway system is configured to transparently separate, merge, and route data traffic between operator systems, live tactical Line Replaceable Unit (LRU) systems, and simulated tactical LRU systems. The LVC gateway is configured to receive LRU commands from an operator system, parse, the commands, and reconstruct the commands suitable for transmission to live or simulated tactical LRU systems. The LVC gateway is also configured to receive live and simulated status and target data from live tactical LRU and simulated tactical LRU systems, respectively, and merge the data for transmission to an operator system.

Live virtual constructive gateway systems and methods

A cyber-security device includes a processor operable to process messages with a data validation rule-set; an external communication interface configured for bi-directional data communication between the processor and external networks or systems; and an internal communication interface configured for bi-directional data communication between the processor and a safety-critical control device, wherein the data received by the processor via either the external or internal communication interface is blocked, sanitized, or passed by the appropriate rule-set, depending on whether the data conform to validation criteria established by the rule-set. The processor analyzes the data, preferably byte-by-byte, with the data in each byte being required to conform to the rule-set validation criteria before being passed from the processor to the appropriate interface.

Bi-directional data security for control systems

A cyber-security system, including a device and associated method, provides secure communications bi-directionally between an external network and an internal network, including a supervisor control and data acquisition (SCADA) device. The device includes a processor in data communication with the external and internal networks that is programmed with a rule-set establishing validation criteria configured to validate data received from the external and internal networks. The processor is operable in an operational mode to pass between the external and internal networks only data that are compliant with the validation criteria. The processor may be configured to save certain validated data indicating a system state that can inform the application of the rule-set to data. The processor is re-programmable with a new rule-set only in a programming mode. The device includes a switch that is manually operable to switch the processor from the operational mode to the programming mode.

Bi-directional data security for supervisor control and data acquisition networks

A cyber-security device provides secure communications bi-directionally between an external network and an internal network including a supervisor control and data acquisition (SCADA) device. The device includes a processor in data communication with the external and internal networks, the processor being programmed with a rule-set establishing validation criteria configured to validate data received from the external and internal networks. The processor is operable in an operational mode to pass between the external and internal networks only data that are compliant with the validation criteria. The processor is re-programmable with a new rule-set only in a programming mode. The device includes a switch that is manually operable to switch the processor from the operational mode to the programming mode.

Growing community of inventors

Highlands Ranch, CO, United States of America

Peter Fischer