Patent ID: 8060744
Filing Date: 2011-11-15
Classification: G06F

Abstract:
1. A method for providing a secure file service, comprising: receiving at a multi-level secure (MLS) file service module a request from a single level secure (SLS) user processor for a classified user data file of a first security classification level, said classified user data file exclusively comprising at least one of user data and a user software application; responsive to said request, accessing with a cryptographic processor an MLS file system containing said classified user data file; decrypting said classified user data file with said cryptographic processor; communicating, from said cryptographic processor, said classified user data file to said SLS user processor in decrypted form; transitioning said SLS user processor from accessing classified user data files of said first security classification level to accessing user data files of a second security classification level contained in said MLS file system; and in response to said transitioning of said SLS user processor, automatically erasing said classified user data file from at least one memory device used by said SLS user processor to temporarily store at least one of said user data and said user software application served to said SLS user processor by said MLS file service module; and wherein said first and second security classification levels specify which classes of persons have access rights to respective ones of said user data files.