Patent ID: 7069437
Filing Date: 2006-06-27
Classification: H04L

Abstract:
1. A multi-level secure network having a plurality of host computers accessible to users and connected to a network medium that has access to an untrusted line, the secure network comprising: a network security controller for generating a plurality of user profiles for a single user identifier that a user inputs to allow access to the network and for sending one of said plurality of user profiles associated with the user identifier to security devices connected to the network medium, each of said user profiles defining at least one of a plurality of destinations which the user is authorized to access through discretionary access control and mandatory access control security mechanisms, wherein a plurality of user profiles define virtual private networks of communication comprising subsets of host computers; and, security systems associated with host computers connected to the network medium for receiving said plurality of user profiles, associated with the single user identifier, generated at the network security controller as selected by the user and for implementing security mechanisms associated with the user profiles, each security system associated with one host computer, each security system having an authorization system for authorizing user identifiers at the associated host computer as inputted by a user, the security device permitting the authorized user, via the associated host computer, to select one of said plurality of user profiles associated with the user identifier and for restricting access of the host computer to the destinations defined in the selected user's profile.