Abstract:
A security routing methodology and system including sensing information contained in an object, analyzing the information to determine a security classification thereof and routing the object to at least one address selected at least partially in accordance with the security classification.

Description:
FIELD OF THE INVENTION  
         [0001]    The present invention relates to routing apparatus and methodologies generally.  
         BACKGROUND OF THE INVENTION  
         [0002]    The following U.S. Patents are believed to represent the state of the art: U.S. Pat. Nos. 5,835,726; 5,606,668; 6,249,801; 5,926,105.  
         SUMMARY OF THE INVENTION  
         [0003]    The present invention seeks to provide security routing apparatus and methodologies.  
           [0004]    There is thus provided in accordance with a preferred embodiment of the present invention a security routing methodology, which includes sensing information contained in an object, analyzing the information to determine a security classification thereof and routing the object to at least one address selected at least partially in accordance with the security classification.  
           [0005]    There is provided in accordance with another preferred embodiment of the present invention a security routing methodology, which includes sensing information contained in an object, analyzing the information to determine a security classification thereof and routing the object to at least one node selected from at least one destination node and at least one intermediate node which is selected at least partially in accordance with the security classification.  
           [0006]    There is also provided in accordance with a preferred embodiment of the present invention a security routing methodology, which includes sensing information contained in an object directed to an address, analyzing the information to determine a security classification thereof and routing the object to a selected at least one of a multiplicity of destinations enroute to the address in accordance with the security classification.  
           [0007]    There is further provided in accordance with another preferred embodiment of the present invention a security routing methodology, which includes sensing, at a first node, information contained in an object, analyzing, at the first node, the information to determine a security classification thereof and routing the object to at least one node selected from at least one destination node and at least one intermediate node which is selected at least partially in accordance with the security classification.  
           [0008]    There is also provided in accordance with yet another preferred embodiment of the present invention a system for routing an object. The system includes an object sensor, sensing information contained in an object, an information analyzer, analyzing the information to determine a security classification thereof and a router, routing the object to at least one address selected at least partially in accordance with the security classification.  
           [0009]    There is further provided in accordance with yet another preferred embodiment of the present invention a system for routing an object, which includes an object sensor, sensing information contained in an object directed to an address, an information analyzer, analyzing the information- to determine a security classification thereof and a router, routing the object to a selected at least one of a multiplicity of destinations enroute to the address in accordance with the security classification.  
           [0010]    There is also provided in accordance with yet a further preferred embodiment of the present invention a system for routing an object, which includes an object sensor, sensing information contained in an object, an information analyzer, analyzing the information to determine a security classification thereof and a router, routing the object to at least one node selected from at least one destination node and at least one intermediate node which is selected at least partially in accordance with the security classification.  
           [0011]    There is also provided in accordance with another preferred embodiment of the present invention a system for routing an object, which includes an object sensor, sensing information contained in an object, an information analyzer, analyzing the information to determine a security classification thereof and a router, routing the object to at least one node selected from at least one destination node and at least one intermediate node which is selected at least partially in accordance with the security classification.  
           [0012]    Further in accordance with a preferred embodiment of the present invention the object includes a message.  
           [0013]    Additionally or alternatively, the object includes at least of the following: a file, an e-mail message, a web page and a communication packet.  
           [0014]    Still further in accordance with a preferred embodiment of the present invention the information contained in an object is selected from a set consisting of: an object content, an object header, an object source and an object destination.  
           [0015]    Additionally in accordance with a preferred embodiment of the present invention the security classification includes a secrecy classification, a danger classification, a suspiciousness classification and/or a maliciousness classification.  
           [0016]    Further in accordance with a preferred embodiment of the present invention the step of analyzing the information includes comparing the information against a security policy. Preferably, the security classification includes at least one of the following: secrecy classification, danger classification, maliciousness classification and suspiciousness classification.  
           [0017]    Still further in accordance with a preferred embodiment of the present invention the step of analyzing the information includes comparing the information to an information contained in at least one other message.  
           [0018]    Further in accordance with a preferred embodiment of the present invention the object contains at least one at least one destination address. Typically, the object includes a message.  
           [0019]    Further in accordance with a preferred embodiment of the present invention the destination address is not one of the at least one address.  
           [0020]    Alternatively, the destination address is one of the at least one address.  
           [0021]    Still further in accordance with a preferred embodiment of the present invention the security routing methodology also includes routing the object from the at least one address to the at least one destination address.  
           [0022]    Additionally in accordance with a preferred embodiment of the present invention the security routing methodology also includes routing the object from the at least one address directly to the at least one destination address.  
           [0023]    Further in accordance with a preferred embodiment of the present invention the security routing methodology also includes modifying the priority of the object.  
           [0024]    Additionally in accordance with a preferred embodiment of the present invention the step of analyzing the information includes comparing the information to an information contained in at least one other message.  
           [0025]    Further in accordance with a preferred embodiment of the present invention the security routing methodology also includes routing the message from the at least one selected node to at least one node addressed in the message.  
           [0026]    Further in accordance with a preferred embodiment of the present invention the object sensor includes a network sniffer.  
           [0027]    Still further in accordance with a preferred embodiment of the present invention the system for routing an object also includes a first interface providing interaction with the at least one first communication network and a second interface providing interaction with the at least one second communication network. 
       
    
    
     BRIEF DESCRIPTION OF THE DRAWINGS  
       [0028]    The present invention will be understood and appreciated more fully from the following detailed description, taken in conjunction with the drawings in which:  
         [0029]    [0029]FIG. 1 is a simplified illustration, partially symbolically depicting an example of security routing functionality in a communication network in accordance with a preferred embodiment of the present invention;  
         [0030]    [0030]FIG. 2 is a highly symbolic illustration depicting the example of FIG. 1;  
         [0031]    FIGS.  3 A- 3 C are simplified illustrations, partially symbolically depicting an example of security routing functionality wherein objects are routed to various addresses, which are destination addresses, in accordance with various security classifications thereof;  
         [0032]    FIGS.  4 A- 4 C are highly symbolic illustrations of the functionality of FIGS.  3 A- 3 C respectively;  
         [0033]    FIGS.  5 A- 5 D are simplified illustrations, partially symbolically depicting an example of security routing functionality wherein objects are routed indirectly to various addresses, the routing being in accordance with various security classifications thereof;  
         [0034]    FIGS.  6 A- 6 D are highly symbolic illustrations of the functionality of FIGS.  5 A- 5 D respectively;  
         [0035]    FIGS.  7 A- 7 D are simplified illustrations, partially symbolically depicting an example of security routing functionality wherein objects are routed along various routes in accordance with various security classifications thereof;  
         [0036]    FIGS.  8 A- 8 D are highly symbolic illustrations of the functionality of FIGS.  7 A- 7 D respectively;  
         [0037]    FIGS.  9 A- 9 D are simplified illustrations, partially symbolically depicting an example of security routing functionality wherein objects are routed or not routed in accordance with various security classifications thereof; and  
         [0038]    FIGS.  10 A- 10 D are highly symbolic illustrations of the functionality of FIGS.  9 A- 9 D respectively. 
     
    
     DETAILED DESCRIPTION OF PREFERRED EMBODIMENTS  
       [0039]    [0039]FIG. 1 shows the security routing functionality of the present invention in an operative environment wherein the security classification of an object is a secrecy classification. In accordance with a preferred embodiment of the invention, each object is routed according to its security classification.  
         [0040]    As seen in FIG. 1, four messages with different security classifications, designated individually by reference numerals  100 ,  101 ,  102  and  104  are send via the Internet  106  to a user  107  within an organization  108  and are routed by a router symbolized by a signaling person and designated by reference numeral  110 . Message  100  contains a device driver program, symbolized by a toothed wheel inside a computer window and is considered to be highly dangerous. Message  100  is shown routed by router  110  via a route  112  that employs a magnetic medium such a diskette as a transfer mechanism and is appropriate to the security classification of the object. Route  112  is marked with a diskette image. Message  101  contains a computer program, symbolized by a computer form and considered to be highly suspicious. Message  101  is routed by router  110  indirectly to a user  107  via an intermediate address having a security classification appropriate thereto, such as computer virus detection system  114 . Message  102  contains offensive content, is symbolized by a shouting person and is considered to be somewhat malicious. Message  102  is not routed by router  110  to any destination address in the organization as symbolized by a no entry sign  116  blocking the message route. Message  104  include top-secret information is shown routed by router  110  to a top security network  118  within the organization whether or not a destination address is located within the security zone.  
         [0041]    [0041]FIG. 2 illustrates the functionality of FIG. 1 in the symbolic context of railroad car routing. As seen in FIG. 2, four railroad cars with different security classifications, designated individually by reference numerals  200 ,  201 ,  202  and  204  are routed by a customs office symbolized by a signaling person designated by reference numeral  210 . It is seen that a railroad car  200  carrying depleted uranium and marked with an atom figure, which is highly dangerous, is routed by customs agent  210  through the least populated route, symbolized by a country side landscape and designated by reference numeral  212 , enroute to a destination address. Railroad car  201  carrying powered sugar from Colombia, which is highly suspicious, is routed by customs agent  210  via a DEA inspection center, symbolized by syringe and designated by reference numeral  214 , enroute to a destination address. Railroad car  202  carrying illicit drugs and marked with a skull symbol, which is highly malicious, is not routed by custom agent  210  to any destination address as symbolized by a no entry sign  216  blocking the tracks. A railroad car  204  carrying government documents and marked with a top secret inscription, clearly having a high-level secrecy classification, is routed by customs agent  210  to the Pentagon  218  whether or not the Pentagon is a destination address of the railroad car.  
         [0042]    Reference is now made to FIGS.  3 A- 3 C which are simplified illustrations, partially symbolically depicting an example of security routing functionality wherein objects are routed to various addresses, which may be or may not be destination addresses, in accordance with various security classifications thereof and to FIGS.  4 A- 4 C, which are highly symbolic illustrations of the functionality of FIGS.  3 A- 3 C respectively.  
         [0043]    [0043]FIG. 3A shows the security routing functionality of the present invention in an operative environment wherein the security classification of an object is a secrecy classification. In accordance with a preferred embodiment of the invention, each object is routed to an address having a secrecy classification appropriate thereto, whether or not that address is a destination address of the object.  
         [0044]    As seen in FIG. 3A, three messages with different secrecy classifications, designated individually by reference numerals  300 ,  302  and  304  are received at the Pentagon, which is designated by reference numeral  306  and routed by a router, symbolized by a signaling person and designated by reference numeral  307 . A top-secret CIA Memo designated by reference numeral  300  is shown routed by router  307  to a top security zone  308  within the Pentagon whether or not a destination address is located within the security zone. A message containing next year&#39;s budget, symbolized by a report containing a graph and designated by reference numeral  302 , which is secret but not top secret, is shown routed by router  307  to a restricted zone  310  whether or not a destination address is located within the restricted zone. A non-secret message received at the Pentagon, symbolized by a newspaper and designated by reference numeral  304 , is routed by router  307  to any destination address within the Pentagon, such as computer  312 .  
         [0045]    [0045]FIG. 4A illustrates the functionality of FIG. 3A in the symbolic context of railroad car routing. As seen in FIG. 4A, three railroad cars with different secrecy classifications, designated individually by reference numerals  400 ,  402  and  404  arrive at a military base, which is designated by reference numeral  406  and are routed by a signaling person designated by reference numeral  408 . It is seen that a railroad car  404  carrying office supplied and marked with a paperclip symbol, which clearly has a non-secret secrecy classification, is routed by signaling person  408  to a destination address  410  within the military base  406 . A railroad car  400  arriving at the military base  406  carrying government documents and marked with a top secret inscription, clearly having a high-level secrecy classification, is routed by signaling person  408  to a highly secure intelligence facility  412  within the military base  406  whether or not the highly secure intelligence facility is a destination address of the railroad car. A railroad car  402  arriving at the military base  406  carrying electronic equipment and marked with a radar symbol, presumably having a medium level secrecy classification, is routed by signaling person  408  to a restricted zone  414  within the military base  406  whether or not a destination address of the railroad car is within the restricted zone  414 .  
         [0046]    [0046]FIG. 3B shows the security routing functionality of the present invention in an operative environment wherein the security classification of an object is a danger classification. In accordance with a preferred embodiment of the invention, each object is routed to an address having a capability to handle objects of the given danger classification, whether or not the address is a destination address of the object.  
         [0047]    As seen in FIG. 31B, three messages with different danger classifications, designated individually by reference numerals  320 ,  322  and  324  are received via the Internet  326  at an organization  328  and are routed by a router symbolized by a signaling person and designated by reference numeral  330 . Message  320 , which contains a device driver program, symbolized by a toothed wheel inside a computer window and considered to be highly dangerous, is shown routed by router  330  to a computer system administrator symbolized by a highly sophisticated computer and designated by reference numeral  332 , whether or not the computer system administrator  322  is a destination address of the message  320 . Message  322 , which contains a computer program symbolized by a computer form and considered to be somewhat dangerous, is routed by router  330  to an experienced user working in the same department as a user  323  that is a destination address of the message  322 . The experienced user is symbolized by a computer of medium sophistication and is designated by reference numeral  334 . A non-dangerous message  324 , which contains a drawing, symbolized by a picture frame, is routed by router  330  to any destination address, such as computer  336 .  
         [0048]    [0048]FIG. 4B illustrates the functionality of FIG. 3B in the symbolic context of railroad car routing. As seen in FIG. 4B, three railroad cars with different danger classifications, designated individually by reference numerals  420 ,  422  and  424  are routed by a signaling person designated by reference numeral  428 . Railroad car  420  carrying depleted uranium and marked with an atom figure, which is highly dangerous, is routed by the signaling person  428  to a remote underground disposal site, designated by reference numeral  430 . A railroad car  422  carrying hospital waste and marked with a figure of test tubes, which is somewhat dangerous, is routed by the signaling person  428  to an incinerator, designated by reference numeral  432 . A railroad car  424 , carrying waste plastic and glass and marked with a trash bin figure, is routed to by the signaling person  428  to a landfill designated by reference numeral  434 .  
         [0049]    [0049]FIG. 3C shows the security routing functionality of the present invention in an operative environment wherein the security classification of an object is a suspiciousness classification. In accordance with a preferred embodiment of the invention, each object is routed to an address having sufficient strength to handle objects of the given suspiciousness classification, whether or not the address is a destination address of the object.  
         [0050]    As seen in FIG. 3C, three messages with different suspiciousness classifications, designated individually by reference numerals  340 ,  342  and  344  are received via the Internet  346  at an organization  348  and are routed by a router symbolized by a signaling person and designated by reference numeral  350 . Message  340  contains a computer program is symbolized by a computer form and is considered to be highly suspiciousness. Message  340  is shown routed by router  350  to a computer system administrator symbolized by a highly sophisticated computer and designated by reference numeral  352 , whether or not the computer system administrator is a destination address of the message. Message  342 , which contains a Microsoft Word document and is symbolized by a Microsoft Word icon, is considered to be somewhat dangerous. Message  342  is routed by router  350  to an experienced user, working in the same department, as a user  353  that is a destination address of the message. The experienced user is symbolized by a computer of medium sophistication and is designated by reference numeral  354 . A non-dangerous message  344 , which contains a drawing, symbolized by a picture frame and considered to be somewhat dangerous, is routed by router  350  to any destination address, such as computer  356 .  
         [0051]    [0051]FIG. 4C illustrates the functionality of FIG. 3C in the symbolic context of railroad car routing. It is seen that a railroad car carrying powered sugar from Colombia, which is highly suspicious, is sent to a nation-wide soft-drinks manufacturer, which has strict quality control facilities, while granulated sugar from Florida, which is somewhat suspicious, is sent to a local bakery, which has some quality control procedures in place. A railroad car carrying granulated sugar from Minnesota is sent to an open market.  
         [0052]    [0052]FIG. 4C illustrates the functionality of FIG. 3C in the symbolic context of railroad car routing. As seen in FIG. 4C, three railroad cars with different suspiciousness classifications, designated individually by reference numerals  440 ,  442  and  444  are routed by a signaling person designated by reference numeral  448 . Railroad car  440  carrying powered sugar from Colombia, which is highly suspicious, is routed by signaling person  448  to a nation-wide soft-drinks manufacturer designated by reference numeral  450 , which has strict quality control facilities. A railroad car  442  carrying granulated sugar from Florida, which is somewhat suspicious, is routed by signaling person  448  to a local bakery, symbolized by a baker and designated by reference numeral  452 , which has some quality control procedures in place. A railroad car  444 , carrying granulated sugar from Minnesota, is routed to by signaling person  448  to any destination address such as open market  454 .  
         [0053]    Reference is now made to FIGS.  5 A- 5 D which are simplified illustrations, partially symbolically depicting an example of security routing functionality wherein objects are routed indirectly to a destination addresses via specific nodes in accordance with various security classifications thereof and to FIGS.  6 A- 6 D, which are highly symbolic illustrations of the functionality of FIGS.  5 A- 5 B respectively.  
         [0054]    [0054]FIG. 5A shows the security routing functionality of the present invention in an operative environment wherein the security classification of an object is a secrecy classification. In accordance with a preferred embodiment of the invention, each object is routed indirectly to an address via a route having a secrecy classification appropriate thereto.  
         [0055]    As seen in FIG. 5A, three messages with different secrecy classifications, designated individually by reference numerals  500 ,  502  and  504  are sent from the White House, which is designated by reference numeral  505 , to an embassy in a foreign country, symbolized by an American flag on a map of Italy and designated by reference numeral  506 , and routed by a router, symbolized by a signaling person and designated by reference numeral  507 . A top-secret message  500  sent from the White House is routed by router  507  via a CIA declassification expert, symbolized by strainer and designated by reference numeral  510 . A message containing next year&#39;s budget, symbolized by a report containing a graph and designated by reference numeral  502 , which is secret but not top secret, is shown routed by router  507  via a White House Security Office, symbolized by a security badge and designated by reference numeral  512 . A non-secret message, such as press release is sent directly to the to embassy  506 .  
         [0056]    [0056]FIG. 6A illustrates the functionality of FIG. 5A in the symbolic context of railroad car routing. As seen in FIG. 6A, three railroad cars with different secrecy classifications, designated individually by reference numerals  600 ,  602  and  604  sent to sent from a first military base symbolized by a saluting soldier and designated by reference number  605  to a second military base also symbolized by a saluting soldier and designated by reference number  606 . The railroad cars are routed by a signaling person designated by reference numeral  608 . It is seen that a railroad car  600  carrying office supplied and marked with a paper clip symbol, which clearly has a non-secret secrecy classification, is routed by signaling person  608  directly to base  606 . A railroad car  602  carrying documents and marked with a top secret inscription, clearly having a high level secrecy classification, routed by signaling person  608  via an encryption facility symbolized by binary digits overlaid with a key and designated by reference numeral  610 . A railroad car  604  carrying radar equipment and marked with a radar symbol, presumably having a medium level secrecy classification, is routed by signaling person  608  via a disguise facility symbolized by person behind a curtain and designated by reference numeral  612 .  
         [0057]    [0057]FIG. 5B shows the security routing functionality of the present invention in an operative environment wherein the security classification of an object is a danger classification. In accordance with a preferred embodiment of the invention, each object is routed along a route having a capability to deal with objects of the given danger classification, such as a suitable danger reduction facility.  
         [0058]    As seen in FIG. 5B, three messages with different danger classifications, designated individually by reference numerals  520 ,  522  and  524  are sent via the Internet  526  to a user  527  within an organization  528  and are routed by a router symbolized by a signaling person and designated by reference numeral  530 . Message  520 , which contains a device driver program, symbolized by a toothed wheel inside a computer window and considered to be highly dangerous, is shown routed by router  530  via a device driver emasculator, which removes file system operations therefrom and is designated by reference numeral  532 . Message  522 , which contains a computer program, symbolized by a computer form and considered to be somewhat dangerous, is routed by router  530  via an experienced user working in the same department as user  527 . The experiences user is distinguished by a notebook computer and is designated by reference numeral  534 . A non-dangerous message  524 , which contains a drawing, symbolized by a picture frame, is routed by router  530  directly to user  527 .  
         [0059]    [0059]FIG. 6B illustrates the functionality of FIG. 5B in the symbolic context of railroad car routing. As seen in FIG. 6B, three railroad cars with different danger classifications, designated individually by reference numerals  620 ,  622  and  624  are sent from a city designated by reference numeral  625  to a disposal site designated by reference numeral  626  and are routed by a signaling person designated by reference numeral  628 . Railroad car  620  carrying depleted uranium and marked with an atom figure which is highly dangerous, is routed by signaling person  628  via a lead encapsulation facility, symbolized by a person wrapping a package and designated by reference numeral  630 . A railroad car  622  carrying hospital waste and marked with a figure of test tubes, which is somewhat dangerous, is routed by signaling person  628  via an incinerator, designated by reference numeral  632 , to disposal site  626 . A railroad car  624 , carrying waste plastic and glass and marked with a trash bin figure, is routed to by signaling person  628  directly to disposal site  626 .  
         [0060]    [0060]FIG. 5C shows the security routing functionality of the present invention in an operative environment wherein the security classification of an object is a suspiciousness classification. In accordance with a preferred embodiment of the invention, each object is routed along a route having a capability to deal with objects of the given suspiciousness classification, such as an appropriate inspection facility.  
         [0061]    As seen in FIG. 5C, three messages with different suspiciousness classifications, designated individually by reference numerals  540 ,  542  and  544  are sent via the Internet  546  to a user  547  within an organization  548  and are routed by a router symbolized by a signaling person and designated by reference numeral  550 . Message  540  contains a computer program, is symbolized by a computer form and is considered to be highly suspicious. Message  540  is routed by router  550  via a computer virus detection system  552 . Message  542 , which contains a Microsoft Word document is symbolized by a Microsoft Word icon and is considered to be somewhat suspicious. Message  542  is routed by router  550  via an experienced user  554  working in the same department as user  547 . The experienced user is distinguished by a notebook computer and is designated by reference numeral  554 . A non-suspicious message  544 , which contains a drawing, symbolized by a picture frame, is routed by router  550  directly to user  547 .  
         [0062]    [0062]FIG. 6C illustrates the functionality of FIG. 5C in the symbolic context of railroad car routing. As seen in FIG. 6C, three railroad cars with different suspiciousness classifications, designated individually by reference numerals  640 ,  642  and  644  are sent to a soft-drinks manufacturer designated by reference numeral  646  and are routed by an FDA agent symbolized by a signaling person and designated by reference numeral  648 . Railroad car  640  carrying powered sugar from Colombia, which is highly suspicious, is routed by FDA agent  648  via a DEA inspection center, symbolized by syringe and designated by reference numeral  650 . A railroad car  642  carrying granulated sugar from Florida, which is somewhat suspicious, is routed by signaling person  648  via a FDA food inspection facility symbolized by test tubes and designated by reference numeral  652 . A railroad car  644 , carrying granulated sugar from Minnesota, is routed by signaling person  648  directly to manufacturer  646 .  
         [0063]    [0063]FIG. 5D shows the security routing functionality of the present invention in an operative environment wherein the security classification of an object is a maliciousness classification. In accordance with a preferred embodiment of the invention, each object is routed along a route having a capability to deal with objects of the given maliciousness classification, such as a suitable danger reduction facility  
         [0064]    As seen in FIG. 5D, three messages with different maliciousness classifications, designated individually by reference numerals  560 ,  562  and  564  are sent via the Internet  566  to a user  567  within an organization  568  and are routed by a router symbolized by a signaling person and designated by reference numeral  570 . Message  560  contains a VBS worm-virus, is symbolized by a worm symbol within a computer window and is considered to be highly malicious. Message  560  is routed by router  570  to a computer security officer, symbolized by a security badge and designated by reference numeral  572 . Message  562  contains offensive content, is symbolized by a shouting person and is considered to be somewhat malicious. Message  562  is routed by router  570  via an offensive content warning facility, symbolized by a rubber stamp and designated by reference number  574 , which attaches a suitable warning to the document enroute to user  567 . A non-malicious message  564 , which contains a drawing, symbolized by a picture frame, is routed by router  570  directly to user  567 .  
         [0065]    [0065]FIG. 6D illustrates the functionality of FIG. 5B in the symbolic context of railroad car routing. As seen in FIG. 6D, three railroad cars with different maliciousness classifications, designated individually by reference numerals  660 ,  662  and  664  are sent to a city designated by reference numeral  666  and are routed by an FDA agent symbolized by a signaling person and designated by reference numeral  668 . Railroad car  660  carrying illicit drugs and marked with a skull symbol, which is highly malicious, is routed by FDA agent  668  to a DEA enforcement center symbolized by a syringe and designated by reference numeral  670 . A railroad car  662  carrying cigarettes and marked with a cigarette symbol, which is somewhat malicious, is routed by signaling person  668  via packaging facility, symbolized by a person wrapping a package and designated by reference numeral  672 , for adding Surgeon General warnings to each package enroute to city  666 . A railroad car  664 , carrying fruits and marked with an apple symbol is routed by signaling person  668  directly to city  666 .  
         [0066]    Reference is now made to FIGS.  7 A- 7 D which are simplified illustrations, partially symbolically depicting an example of security routing functionality wherein objects are routed along various routes, in accordance with various security classifications thereof and to FIGS.  8 A- 8 D, which are highly symbolic illustrations of the functionality of FIGS.  7 A- 7 D respectively.  
         [0067]    [0067]FIG. 7A shows the security routing functionality of the present invention in an operative environment wherein the security classification of an object is a secrecy classification. In accordance with a preferred embodiment of the invention, each object is routed via a route appropriate to the secrecy classification of the object.  
         [0068]    As seen in FIG. 7A, three messages with different secrecy classifications, designated individually by reference numerals  700 ,  702  and  704  are sent from the White House, which is designated by reference numeral  705 , to the Pentagon, which is designated by reference numeral  706 , and routed by a router, symbolized by a signaling person and designated by reference numeral  707 . A non-secret message, such as press release  700  is shown routed by router  707  via the Internet, symbolized by a network cloud and designated by reference numeral  708 . A message containing next year&#39;s budget, symbolized by a report containing a graph and designated by reference numeral  702  which is secret but not top secret, is shown routed by router  707  through a virtual private network (VPN) over the Internet. The VPN over the Internet is symbolized by an ellipse marked with binary digits overlaid with a key and designated by reference numeral  710 . A top-secret message  704  is routed by router  707  via a secure intra-government computer network, symbolized by a network cloud overlaid with a lock and designated by reference numeral  712 .  
         [0069]    [0069]FIG. 8A illustrates the functionality of FIG. 7A in the symbolic context of railroad car routing. As seen in FIG. 8A, three railroad cars with different secrecy classifications, designated individually by reference numerals  800 ,  802  and  804  sent to sent from a military base in Texas, symbolized by a saluting soldier over the map of Texas and designated by reference number  805  to a military base in California, symbolized by a saluting soldier over the map of California and designated by reference number  806 . The railroad cars are routed by a signaling person designated by reference numeral  808 . It is seen that a railroad car  800  carrying office supplied and marked with a paper clip symbol, which clearly has a non-secret secrecy classification, is routed by signaling person  808  through a route which includes Mexico, symbolized by a map of Mexico and designated by reference numeral  810 . A railroad car  802  carrying documents and marked with a top secret inscription, clearly having a high level secrecy classification, is routed by signaling person  808  via the fastest wholly domestic route, symbolized by a rabbit and designated by reference numeral  812 . A railroad car  804  carrying radar equipment and marked with a radar symbol, presumably having a Himedium level secrecy classification, is routed by signaling person  808  via the most economical domestic route symbolized by piggy bank and designated by reference numeral  814 .  
         [0070]    [0070]FIG. 7B shows the security routing functionality of the present invention in an operative environment wherein the security classification of an object is a danger classification. In accordance with a preferred embodiment of the invention, each object is routed via a route appropriate to the danger classification of the object.  
         [0071]    As seen in FIG. 7B, three messages with different danger classifications, designated individually by reference numerals  720 ,  722  and  724  are send via the Internet  726  to a user  727  within an organization  728  and are routed by a router symbolized by a signaling person and designated by reference numeral  730 . Message  720 , which contains a VBS worm-virus needed for research purposes, is symbolized by a worm symbol within a computer window and is considered to be highly dangerous. Message  720  is shown routed by router  730  via a route  732  that employs a magnetic medium such a diskette as a transfer mechanism. Route  732  is marked with a diskette image. Message  722 , which contains a beta version of a computer program, symbolized by a computer form and considered to be somewhat dangerous, is routed by router  730  through an isolated development network  734 . A non-dangerous message  724 , which contains a drawing, symbolized by a picture frame, is routed by router  730  through the organization&#39;s Intranet  736 .  
         [0072]    [0072]FIG. 8B illustrates the functionality of FIG. 7B in the symbolic context of railroad car routing. As seen in FIG. 8B, three railroad cars with different danger classifications, designated individually by reference numerals  820 ,  822  and  824  are sent from a city designated by reference numeral  825  to a disposal site designated by reference numeral  826  and are routed by a signaling person designated by reference numeral  828 . Railroad car  820  carrying depleted uranium and marked with an atom figure, which is highly dangerous, is routed by signaling person  828  through the least populated route, symbolized by a country side landscape and designated by reference numeral  830 . A railroad car  822  carrying hospital waste and marked with a figure of test tubes, which is somewhat dangerous, is routed by signaling person  828  along the faster route, symbolized by a rabbit and designated by reference numeral  832 . A railroad car  824  carrying waste plastic and glass and marked with a trash bin figure, is routed to by signaling person  828  via the most economical domestic route symbolized by piggy bank and designated by reference numeral  834 .  
         [0073]    [0073]FIG. 7C shows the security routing functionality of the present invention in an operative environment wherein the security classification of an object is a suspiciousness classification. In accordance with a preferred embodiment of the invention, each object is routed via a route having a capability to deal with objects of the given suspiciousness classification, such as an appropriate inspection facility.  
         [0074]    As seen in FIG. 7C, three messages with different suspiciousness classifications, designated individually by reference numerals  740 ,  742  and  744  are send via the Internet  746  to a user  747  within an organization  748  and are routed by a router symbolized by a signaling person and designated by reference numeral  750 . Message  740  contains a VBS Script, is symbolized by a computer form and is considered to be highly suspicious. Message  740  is routed along route  752  that employs a magnetic medium such a diskette as a transfer mechanism. Route  752  is marked with a diskette image. Message  742 , which contains a Microsoft Word document is symbolized by a Microsoft Word icon and is considered to be somewhat suspicious. Message  742  is routed by router  750  via an isolated development network  754 . A non-suspicious message  744 , which contains a drawing, symbolized by a picture frame, is routed by router  750  through the organization&#39;s general purpose network  756 .  
         [0075]    [0075]FIG. 8C illustrates the functionality of FIG. 7C in the symbolic context of railroad car routing. As seen in FIG. 8C, three railroad cars with different suspiciousness classifications, designated individually by reference numerals  840 ,  842  and  844  are sent to an FDA inspection center symbolized by a figure of test tubes and designated by reference numeral  846 . The railroad cars are routed by an FDA agent symbolized by a signaling person and designated by reference numeral  848 . Railroad car  840  carrying powered sugar from Afghanistan, which is highly suspicious, is routed by FDA agent  848  along through the least populated route, symbolized by a country side landscape and designated by reference numeral  850 . A railroad car  842  carrying granulated sugar from Colombia, which is somewhat suspicious, is routed by FDA agent  848  along the faster route, symbolized by a rabbit and designated by reference numeral  852 . A railroad car  844 , carrying granulated sugar from Minnesota, is routed by signaling person  848  via the most economical domestic route symbolized by piggy bank and designated by reference numeral  854 .  
         [0076]    [0076]FIG. 7D shows the security routing functionality of the present invention in an operative environment wherein the security classification of an object is a maliciousness classification. In accordance with a preferred embodiment of the invention each object is routed via a route appropriate to the maliciousness classification of the object.  
         [0077]    As seen in FIG. 7D, three messages with different maliciousness classifications, designated individually by reference numerals  760 ,  762  and  764  are send via the Internet  766  to a user  767  within an organization  768  and are routed by a router symbolized by a signaling person and designated by reference numeral  770 . Message  760  contains a VBS worm-virus, is symbolized by a worm symbol within a computer window and is considered to be highly malicious. Message  760  is routed by router  770  is routed through route  772 , which is marked with a diskette image and employs a magnetic medium such a diskette as a transfer mechanism, to a computer security officer, which is symbolized by a security badge and designated by reference numeral  774 , Message  762  contains offensive content, is symbolized by a shouting person and is considered to be somewhat malicious. Message  762  is routed by router  770  via an encrypted route over the organization&#39;s network. The encrypted route is marked with binary digits overlaid with a key and designated by reference numeral  776 . A non-malicious message  764 , which contains a drawing, symbolized by a picture frame, is routed by router  760  through the organization&#39;s network  778 .  
         [0078]    [0078]FIG. 8D illustrates the functionality of FIG. 7D in the symbolic context of railroad car routing. As seen in FIG. 8D, three railroad cars with different maliciousness classifications, designated individually by reference numerals  860 ,  862  and  864  are sent to an FDA inspection center symbolized by a figure of test tubes and designated by reference numeral  866 . The railroad cars are routed by an FDA agent symbolized by a signaling person and designated by reference numeral  868 . Railroad car  860  carrying illicit drugs and marked with a skull symbol, which is highly malicious, is routed by FDA agent  868  along through the least populated route, symbolized by a country side landscape and designated by reference numeral  870 . A railroad car  862  carrying cigarettes and marked with a cigarette symbol, which is somewhat malicious, is routed by signaling person  868  along the faster route, symbolized by a rabbit and designated by reference numeral  872 . A railroad car  864 , carrying fruits and marked with an apple symbol, is routed by signaling person  868  via the most economical domestic route symbolized by piggy bank and designated by reference numeral  874 .  
         [0079]    Reference is now made to FIGS.  9 A- 9 D, which are simplified illustrations, partially symbolically depicting an example of security routing functionality wherein objects are routed or not routed in accordance with various security classifications thereof and to FIGS.  10 A- 10 D, which are highly symbolic illustrations of the functionality of FIGS.  9 A- 9 D respectively.  
         [0080]    [0080]FIG. 9A shows the security routing functionality of the present invention in an operative environment wherein the security classification of an object is a secrecy classification. In accordance with a preferred embodiment of the invention, each object is routed to an address that has a secrecy classification appropriate thereto or not routed.  
         [0081]    As seen in FIG. 9A, three messages with different secrecy classifications, designated individually by reference numerals  900 ,  902  and  904  are sent from the White House which is designated by reference numeral  905  and are routed by a router, symbolized by a signaling person and designated by reference numeral  907 . A top-secret message  900  sent from the White House is not routed by router  907  to any destination address outside of the White House, as symbolized by a no entry sign  908  blocking the message route. A message containing next year&#39;s budget, symbolized by a report containing a graph and designated by reference numeral  902 , which is secret but not top secret, is routed by router  907  to any government destination address such as the Pentagon, which is designated by reference numeral  910 . A non-secret message, such as press release  904  is sent to any destination address, such as a foreign address  912  symbolized by the leaning tower of Pisa.  
         [0082]    [0082]FIG. 10A illustrates the functionality of FIG. 9A in the symbolic context of railroad car routing. As seen in FIG. 10A, three railroad cars with different secrecy classifications, designated individually by reference numerals  1000 ,  1002  and  1004  sent from a military base symbolized by a saluting soldier and designated by reference number  1005 . The railroad cars are routed by a signaling person designated by reference numeral  1008 . It is seen that a railroad car  1000  carrying office supplied and marked with a paper clip symbol, which clearly has a non-secret secrecy classification, is routed by signaling person  1008  to any destination address, such as a city  1010 . A railroad car  1002  carrying documents and marked with a top secret inscription, clearly having a high level secrecy classification, is not routed by router  1008  to any destination address outside of the military base, as symbolized by a no entry sign  1012  blocking the tracks. A railroad car  1004  carrying radar equipment and marked with a radar symbol, presumably having a medium level secrecy classification, is routed by signaling person  1008  to any government destination address such as the Pentagon, which is designated by reference numeral  1014 .  
         [0083]    [0083]FIG. 9B shows the security routing functionality of the present invention in an operative environment wherein the security classification of an object is a danger classification. In accordance with a preferred embodiment of the invention, each object is routed to an address that has a danger classification appropriate thereto or not routed.  
         [0084]    As seen in FIG. 9B, three messages with different danger classifications, designated individually by reference numerals  920 ,  922  and  924  are received via the Internet  926  at an organization  928  and are routed within the organization by a router symbolized by a signaling person and designated by reference numeral  930 . Message  920 , which contains a VBS worm-virus needed for research purposes, is symbolized by a worm symbol within a computer window and is considered to be highly dangerous. Message  920  is not routed by router  930  to any destination address in the organization as symbolized by a no entry sign  932  blocking the message route. Message  922 , which contains a beta version of a computer program, symbolized by a computer form and considered to be somewhat dangerous, is routed by router  930  only to experienced users, such as user  934  symbolized by a notebook computer. A non-dangerous message  924 , which contains a drawing, symbolized by a picture frame, is routed by router  930  to any address in the organization such as novice user  936  symbolized by a user accompanied by an instructor.  
         [0085]    [0085]FIG. 10B illustrates the functionality of FIG. 9B in the symbolic context of railroad car routing. As seen in FIG. 10B, three railroad cars with different danger classifications, designated individually by reference numerals  1020 ,  1022  and  1024  are received at a disposal site designated by reference numeral  1026  and are routed within the disposal site by a signaling person designated by reference numeral  1028 . Railroad car  1020  carrying depleted uranium and marked with an atom figure, which is highly dangerous, is not admitted by signaling person  1028  into the disposal site as symbolized by a no entry sign  1030  blocking the tracks. A railroad car  1022  carrying hospital waste and marked with a figure of test tubes, which is somewhat dangerous, is routed by signaling person  1028  to an the incinerator facility  1032  of the disposal site. A railroad car  1024 , carrying waste plastic and glass and marked with a trash bin figure, is routed to by signaling person  1028  to the land fill facility  1034  of the disposal site.  
         [0086]    [0086]FIG. 9C shows the security routing functionality of the present invention in an operative environment wherein the security classification of an object is a suspiciousness classification. In accordance with a preferred embodiment of the invention, each object is routed to an address that has a suspiciousness classification appropriate thereto or not routed.  
         [0087]    As seen in FIG. 9C, three messages with different suspiciousness classifications, designated individually by reference numerals  940 ,  942  and  944  are received via the Internet  946  at organization  948  and are routed within the organization by a router symbolized by a signaling person and designated by reference numeral  950 . Message  940 , which contains an executable program, is symbolized by a computer form and is considered to be highly dangerous. Message  940  is not routed by router  950  to any destination address in the organization as symbolized by a no entry sign  952  blocking the message route. Message  942 , which contains a Microsoft Word document is symbolized by a Microsoft Word icon and is considered somewhat suspicious, is routed by router  950  only to experienced users, such as an user  954  symbolized by a notebook computer. A non-suspicious message  944 , which contains a drawing, symbolized by a picture frame, is routed by router  950  to any address in the organization such as ordinary user  956  symbolized by a user accompanied by an instructor.  
         [0088]    [0088]FIG. 10C illustrates the functionality of FIG. 9C in the symbolic context of railroad car routing. As seen in FIG. 10C, three railroad cars with different suspiciousness classifications, designated individually by reference numerals  1040 ,  1042  and  1044  are routed by an FDA agent symbolized by a signaling person and designated by reference numeral  1048 . Railroad car  1040  carrying powered sugar from Afghanistan, which is highly suspicious, is not sent to any destination, as symbolized by a no entry sign  1050  blocking the tracks. A railroad car  1042  carrying granulated sugar from Colombia, which is somewhat suspicious, is routed by FDA agent  1048  to a nation-wide soft-drinks manufacturer designated by reference numeral  1052 , which has strict quality control facilities. A railroad car  1044 , carrying granulated sugar from Minnesota, is routed by signaling person  1048  to any destination address such as an open market  1054 .  
         [0089]    [0089]FIG. 9D shows the security routing functionality of the present invention in an operative environment wherein the security classification of an object is a maliciousness classification. In accordance with a preferred embodiment of the invention, each object is routed to an address that is equipped to handle objects having a corresponding maliciousness classification or is not routed.  
         [0090]    As seen in FIG. 9D, three messages with different maliciousness classifications, designated individually by reference numerals  960 ,  962  and  964  are received via the Internet  966  by an organization  968  and are routed within the organization by a router symbolized by a signaling person and designated by reference numeral  970 . Message  960  contains a VBS worm-virus, is symbolized by a worm symbol within a computer window and is considered to be highly malicious. Message  960  is not routed by router  970  to any destination address in the organization as symbolized by a no entry sign  972  blocking the message route. Message  962  contains offensive content, is symbolized by a shouting person and is considered to be somewhat malicious. Message  962 , which is routed by router  970  only to adult users, such as an elderly user  974 . A non-malicious message  964 , which contains a drawing, symbolized by a picture frame, is routed by router  970  to any destination address such as user  976  symbolized by a baby.  
         [0091]    [0091]FIG. 10D illustrates the functionality of FIG. 9D in the symbolic context of railroad car routing. As seen in FIG. 10D, three railroad cars with different maliciousness classifications, designated individually by reference numerals  1060 ,  1062  and  1064  are sent from an FDA inspection center symbolized by a figure of test tubes and designated by reference numeral  1066 . The railroad cars are routed by an FDA agent symbolized by a signaling person and designated by reference numeral  1068 . Railroad car  1060  carrying illicit drugs and marked with a skull symbol, which is highly malicious, is not routed by FDA agent  1068  to any destination address outside of the inspection center as symbolized by a no entry sign  1070  blocking the tracks. A railroad car  1062  carrying cigarettes and marked with a cigarette symbol, which is somewhat malicious, is sent by FDA agent  1068  only to an authorized bonded packaging facility  1072 . A railroad car  1064 , carrying fruits and marked with an apple symbol, is routed by FDA agent  1068  to any destination address such as an open market  1074 .  
         [0092]    It will be appreciated by persons skilled in the art that the present invention is not limited by what has been particularly shown and described herein above. Rather the scope of the present invention includes both combinations and subcombinations of the various features described hereinabove as well as variations and modifications which would occur to persons skilled in the art upon reading the specifications and which are not in the prior art.