Patent ID: 9590964
Date: 2017-03-07
CPC Classifications: G06F,H04L,H04W

Claim:
1. A method for routing of information between networks of differing security levels, comprising: receiving, from a first network having a first security classification, one or more data packets intended for transmission to a second network having a second security classification, via a first offload engine based on a first processor of a network node; determining a geographic location of the network node via a position sensor of the network node; applying one or more geographic location-dependent access control rules to the one or more data packets according to the geographic location via a guard engine of the network node, the one or more geographic location-dependent access control rules included in an access control list of the guard engine, the guard engine based on a second processor with intrinsic partitioning architecture and running at least one Multiple Independent Levels of Security (MILS)-certified operating system; and upon a determination by the guard engine that the one or more data packets comply with the one or more geographic location-dependent access control rules, transferring the one or more data packets from the first offload engine to a second offload engine associated with the second network by authorizing a guard data mover of the guard engine to transfer the one or more data packets from the first offload engine to the second offload engine, the guard data mover configured to provide at least one independent unidirectional data channel between the guard engine and the first offload engine.