Patent ID: 8898227
Filing Date: 2014-11-25
Classification: G06F,H04L

Abstract:
1. A secure system for bilaterally transferring information between a client coupled to a first network and a server coupled to a second network, comprising: a first platform comprising a first send server having a data communications interface, a first one-way data link having an input and an output, and a first receive server having a data communications interface, the first send server coupled to the input of the first one-way data link and the first receive server coupled to the output of the first one-way data link, the first send server configured to forward information received at the data communications interface to the input of the first one-way data link, the first receive server configured to forward information received from the output of the first one-way data link to the data communications interface; a second platform comprising a second send server having a network connection and a data communications interface, a second one-way data link having an input and an output, and a second receive server having a network connection and a data communications interface, the second send server coupled to the input of the second one-way data link and the second receive server coupled to the output of the second one-way data link, the second receive server coupled to the first network via the network connection, the data communications interface of the second receive server coupled only to the data communications interface of the first send server, the second send server coupled to the second network via the network connection and the data communications interface of the second send server coupled only to the data communications interface of the first receive server; wherein the second receive server is configured to receive first information from the client via the first network and the network connection, to process the received first information and to forward the processed first information to the first send server via the data communications interface; wherein the second send server is configured to receive the processed first information via the data communications interface and to forward the processed first information to the server via the network connection and second network; wherein the second send server is also configured to receive second information from the server via the second network and the network connection and to forward the second information to the second receive server via the second one-way data link; wherein the second receive server is also configured to receive the second information from the second one-way data link and to forward the second information to the client via the network connection and first network; and wherein the first information comprises an NFS function call of a set of possible NFS function calls and wherein the processing performed by the second receive server comprises identifying a type of the NFS function call and blocking further transmission of the NFS function call if the identified type does not correspond to any one of a predetermined subset of possible NFS function calls.