Compact hardware architecture for secure exchange of information and advanced computing

A general purpose modified single board computer (MSBC) device for operational and performance enhancement of computer systems. The modification configures the bus interface function of the (MSBC) such that it can reside on the expansion-bus of a host computer system and operate as an add-in card to the hosting system. This device provides the means to employ the resources of a full computer system, to enhance the operation and performance of an information system hosting this device. The MSBC permits a “system in system” architecture thus efficiently enabling advanced capabilities for existing and future computer and information systems.

DETAILED DESCRIPTION OF THE INVENTION The invention has several fundamental embodiments which are described in the following sections. Other embodiments are derived from these fundamental embodiments. The term “domain” is used throughout this document. “Domain” is defined as a system or network or set of systems or networks. The term “router” refers to a computer that selects and implements, at the software level, data-paths from one location to another in a computer network. Also the term “signal” is used synonymously with data, data sets, files, messages, packets, protocol sequences, etc. throughout this document, to stress generality. Signals, as referenced herein, refer to any information carrying quanta, such as electromagnetic current, lightwaves, which are processable by information system technology. It is fundamental to realize that data, data sets, control commands, etc., are manifested as electronic signals and/or electro-optic signals and that information systems and networks transform and transceive such signals, and that the invention as described more fully below, operates at this fundamental signal level. Prior Art Attempts Referring to FIG. 1 , there is illustrated a prior art firewall arrangement. An ordinary gateway function module 1 sits between two filtering routers 3 and 4 . One router 3 is connected to an internal network 5 and the gateway 1 . The other router 4 is connected to an external network 6 and the gateway. These modules and especially their software must interact in an error-free and complex fashion to enforce a security policy for information transfer between the internal network and the external network. Since these modules primarily implement a filtering function 2 , which implies that externally generated signal traffic will enter the internal network. Such traffic may be contaminated, and thus compromise the internal network. All methods in current practice are software based, and operate on a framework derivable from that depicted in FIG. 1 . Generally, software cannot be “trusted” to function correctly, where Atrusted&commat; is defined to include provable correctness in structure, compilation, installation, operation. Also hacking and other types of intrusions attack the software of the networks that are targeted. A prime example is the Internet where intrusions, hacking, web-site compromise, and other forms of software misuse are rampant. Hardware-Based InfoSec Provided by the Present Invention Referencing FIG. 2 , the intermediate domain screen (IDS) 10 of the present invention is a hardware system composed at least three (3) and in some embodiments of four (4) generic hardware components. The basic components are an IntermediateDomain-Device (IDD) 12 , an external domain socket 14 , and an IDS to internal domain socket 13 . A fourth hardware component is an internal domain to IDS socket 17 . The sockets can take the form of conventional modem type devices including special purpose signal processing and signal transfer components such as video, wireless communication, integrated telephony, and facsimile cards and the like, programmable systems or devices such as single board computers (SBC), smart digital signal processors, embedded systems and the like, large mainframes, local and/or wide area networks (LANs/WANs). The invention physically and logically separates an internal domain 15 from an external domain 16 . The internal domain can range from a single system such as a personal computer or web site to a network, as can the external domain. The internal domain is the domain being protected by the invention, and is referred to as the host or protected domain. Each of the sockets 13 , 14 and 17 can be implemented as a set of sockets. Socket 13 allows only specific types of signals or data sets to inter the host 15 . Socket 17 performs a filter or guard function between the host 15 and the IDS, to restrict and control the release of signals from the host 15 . The IDD 12 , acts as a confinement domain for external signals or data sets carried by incoming signals, thus preventing viruses (and other forms of hostile code) contained in the external signals from entering the protected domain or host. The IDD provides an intermediate domain for safe information interchange between the internal-domain/host 15 and the external domain 16 . This interchange includes execution of external programs, Internet access such as web browsing, updating internal-domain programs and software, which have been sent, via socket 17 , to the IDD by a host filtering or selection process residing in the IDD for updating and/or other interaction with the external domain. The IDD executes an “information-preserving-data-transformation” process to extract necessary information from external signals and transmits such information, via socket 13 , to the host 15 . This process is called a modified-read (M-R), and in conjunction with socket 13 insures that only uncontaminated signals or data sets are transmitted to the host. Socket 13 transmits only signals that have undergone the (M-R) process. The socket components 14 , 13 and 17 must not communicate directly with each other in an IDS configuration. This could facilitate unauthorized data transfers. All data transfer must be monitored by the IDD 12 . As an example; to insure this, a bus request pin of a network interface card, NIC, embodying socket 14 must be deactivated, i.e. grounded. This results in a (partially connected) hardware architecture. In many instances, InfoSec concerns must also include the possibility of compromise from within. Such compromise can be malicious, or inadvertent. The inadvertent compromise can result from system malfunction and/or user/operator error. In the data flow control framework, the unauthorized release of information as a result of such compromise is addressed by the invention, wherein the IDS can restrict host 15 users, i.e. insiders, to specific, controlled functions relative to the external domain 16 . Socket 17 operation supplies a filter or guard function, the purpose of which is to prevent unauthorized release of data or information from a protected host. In this respect, the socket 17 may include a single board computer which is programmable to filter or screen signals passing from the host to the IDD so that only authorized or releasable data is allowed to enter the IDD from the host. Large environments, such as networks are typical applications for versions of the IDS. Thus advanced, sophisticated filtering type functions can be implemented. Depending on the processing power of the component chosen to implement the IDD 12 , the filter function can range from a simple template-matching query filter to highly sophisticated, adaptive, cognitive, content analyzing, auto-classifier type capabilities. As a hardware system, the IDS 10 physically separates its host computer systems from an external system or network at the signal level. Thus, all viruses, worms, and other forms of hostile executable code contained in external signals or data sets are prevented from entering the host system, because all external signals are confined to the IDD 12 . The IDS receives data, some of which might possibly be contaminated from external domains, extracts the “information” contained in this data, and safely transmits such “information” to the protected host 15 . Basic versions of the IDS implement a video-transformation modified-read process. This is a signal level (information preserving) data transformation. No outbound data or signal path from the host system exists. Thus unauthorized clandestine or inadvertent transmission of host data, is prevented. In the programmable IDS versions where signals are transmitted from the host, a comprehensive generic processor-based intermediate domain is provided which can be used with smart adaptive InfoSec agent programs capable of hostile-penetration countermeasure type functions. These functions include adaptive classifiers, session encryptors, and e-mail (payload) encryption functions, for safe transit of outgoing IDS data. All IDS versions can also reside remotely from their host system. Such versions can be configured to protect several host systems simultaneously. The IDS architecture easily accommodates IDS to host encryption (i.e. end-to-end encryption) to protect data in transit through public networks linking the host and the IDS. Hybrid versions of the IDS which implement a modified-read (M-R) function to remove hostile data from incoming data streams, simultaneously implement a filter function, to prevent unauthorized data exflltration from the host. The hybrid version combines any set of IDS versions to screen incoming traffic and outgoing traffic. It thus allows the host safe and simultaneous connectivity to domains of different security levels. In addition, the IDD, intermediate domain device can be set to control the host systems. In this mode of operation, the IDD becomes an administrative control device to selectively restrict host system access to the external domains (e.g. the Internet) and/or to confine signals incoming from external domains. Referencing FIG. 3, a network IDS 10 , as defined in FIG. 2 , is shown protecting a set of internal domains 15 , 15 ', etc. The IDS 10 device includes programmable systems and includes an authentication processor 18 to implement a device-identification-number (DIN) authentication process to verify the identity and authorized presence of another IDS 10 ′, or other device such as hosts 15 , 15 ′ in the network. The IDS 10 ′ device includes an authentication process 18 ′. The communications subsystem of an IDS can use a DIN in the same manner that people use a PIN (personal identification number), with a bank card. DIN equipped IDS devices can operate a hardware-level inter-device authentication process. This DIN authentication process is operated during the initial handshake and randomly during a communications session, between IDS devices and/or other DIN equipped devices. A DIN can be variable, for added rigor. This process permits authorized network nodes/stations to identify any unauthorized and/or possibly malfunctioning nodes in a network. The IDS uniquely implements this process at the signal level of a network. Further, the DIN is encyphered by its IDS, for secure transit to other IDS devices. Thus, the process is invisible to hackers and other disrupters who operate at the software levels of a network. In the network shown, host 15 is connected to IDS 10 through outgoing socket 17 and incoming socket 13 while IDS 10 is connected to the external domain 16 through socket 14 and to networked IDS 10 ′. IDS 10 ′ is connected to the external domain, or another external domain, through socket 14 ′ and through host input socket 13 ′ to host 15 ′ and socket 17 ′ from host 15 ′. Referring to FIG. 4 , the IDS architecture can utilize video teleconferencing technology. In this embodiment, an IDS 20 is defined, utilizing desktop video conference (DVC) technology. As a brief background, operational interface standards for DVC are evolving. Generally the standard designations are as follows: H. 320 →DVC over the ISDN/POTS telephone environment H. 323 →DVC over LAN environment T. 120 →Collaborative Computing (e.g. Whiteboarding) The majority of present DVC capabilities address either H.320 (telephone domain) or H.323 (LAN domain) either (or both) of which is the external domain 26 from which signals are received by an IDS 20 . We now consider a DVC capability which addresses both the LAN and the telephone domains. Such a capability will permit simultaneous LAN and telephone domain connection. Conceivably, a user could connect to a classified LAN, and the Internet, simultaneously. Most InfoSec policies would forbid such simultaneous connectivity. In FIG. 4, a LAN/phone capable DVC device such as a PictureTel 550 is used in an IDS 20 . The IDD 22 of the invention contains a LAN/phone DVC card. Generally, the DVC card is a peripheral-device to the system containing it. The DVC card also is obviously an external (interface) socket 24 for the IDS. A videoswitch 23 a is used to pass information to internal (protected) domains 25 and 25 ′. This switch is thus a socket to the internal domains. Each internal domain communicates with the IDS 20 , in a remote-control DVC mode through receiver sockets 23 and 23 ′. This can be achieved by a simple whiteboarding-function which is a standard feature, that can permit one computer system to control another. Specifics would be driven by the T.120 standard and the particular devices used for implementation. By the video teleconferencing process, the information or original data set carried by signals from the external domain is processed through the IDD DVC card 24 so that the original data set is, at the output, a second data set from which information is extracted and is sent to the host domain in a video format. This conforms to the modified-read requirements for IDS operation. For applications where the unauthorized leakage/exfiltration of internal data, is of major concern, it should be remembered that the IDS 20 architecture via socket 27 forces all outbound signals from internal domains into the IDD 22 . Signals in the IDD can be reviewed, manually and/or automatically for authorization, prior to interaction with external signals. This is a form of insider control. The IDS permits components to be remotely located. Also, the IDS can be remotely connected to its host system, with no reduction in the IDS ability to protect the host system. The IDS architecture is modular and thus permits modular maintenance and modular upgrade without adverse impact on the protection capability. As an example, for IDS applications using video signals, an advanced tv-cardlvideo-signal-receiver can detect and filter unauthorized and/or undesired data signals imbedded in a video, e.g. tv signal transmissions. Such video receivers will, in their IDS function, isolate all incoming transmissions from program execution domains of the protected host system. Referencing FIG. 5, a fundamental modified-read (M-R) process is illustrated. The modified-read operation deals with information transfer. Possibly contaminated signals and the data they carry are received from an external domain 37 via the extended interface socket 34 of an IDS 30 . In this example, the transfer is between a control module 31 and an external-interface-module (EIM) 32 of the IDS 30 which is, for example, a single board computer (SBC), embedded microprocessor (EMB) or embedded micro-controller (EMC) personal computer. The bus control signals from the EIM are restricted so that an EIM cannot, relative to the main IDS bus 33 , become bus master and thus initiate data transfer. This is accomplished by disabling (e.g. grounding) the appropriate main IDS bus/(IDD internal communications segment) control signals from the EIM s internal interface. The modified-read operation functions as follows: IDS Control Module (CM) 31 scans the external request buffer of EIM 32 and checks request pending flag (note: EIM main memory contents must remain in the EIM, to confine possible contamination). If a request is pending, set read flag in the execution buffer file (EBF) 35 . EIM 32 continually scans for read flag in EBF 35 . If read flag is set, the modified-read process is initiated to process the incoming signal from the external domain such as by a facsimile process, a conversion to video format process, or a printed format process. When the modified-read sequence is complete, EBF 35 ready flag is set and the control module 31 transfers EBF 35 to main memory, for processing. The above sequence defines the information transfer within a modified-read operation. The actual external data, which may be contaminated, never leaves the EIM 32 . Information in the EBF 35 is transferred through socket 36 to the protected domain 38 . From the command of the control module, the EIM 32 will transfer its main memory contents to the probe memory (or holding area) in the CM 31 . Subsequent steps are as follows: Probe functions of the CM 31 builds an execution buffer file (EBF) 35 . This is a coded representation of relevant (to the IDS function) contents of the EIM's main memory. This EBF 35 is what is actually transferred from the EIM 32 into the control module 31 of the IDS, for insertion into the IDD-to-internal domain socket 36 . This process acts as an electronic air-gap, blocking the transfer of possibly contaminated data. The IDD 40 via the CM 31 acts on the EBF 35 . The EBF format and contents are unknown to external domains 37 , and inaccessible from these domains. The EBF is transferred to the protected domain 38 via socket 36 . The CM 31 returns status, response to requests, flush commands, etc. to the EIM. Actual CM 31 responses are obviously application specific. The EBF, constructed by the EIM probe function, must conform to a proper set of EBF patterns/sequences authorized and recognized by the CM. Contaminated external data never leaves the EIM 32 . This condition is enforced by allowing no raw external data to leave the EIM, in-bound to a protected system 38 . A prime modified-read (M-R) objective is to prevent inadvertent or externally controlled execution of hostile code. Secondary objectives include forcing internal user deliberate interaction for execution of received external executable code. The following guidelines should be used for M-R implementation: Incoming binary (including executable) data strings must: a) be modified to an alternate binary (non-executable) format; b) be treated as non-executable data (e.g. text data) by the receiving system; and c) be transformed, preserving information, but alternating data strings. Incoming data stream (binary) must not re-appear in the system (without direct user action). Transformation properties (at receivers) must: a) be known to external data transmitter; b) not have an inverse derivable by transmitter (thus eliminating cryptography); and c) map data stream into machine usable format. By way of Example: Take binary data stream; 1000111010010100001111010111-(d b ) Transformation T i ¦ iE N&plus; Then: for example; . . . f i (0), f i (1). . .&equals;T i (d b ) T i (d b );T i T i -1 ≠I no inverse exists (where I is an identity transformation) T i (d b )≠(d b ) no unity, (for all i) T i (d b ) is processable only in non-executable domains of the receiving system. By way of example, the modified real process may include the use of a facsimile machine to receive the incoming signal which may contain hostile data. The signal from the external domain is converted to print data which is a non-executable format at the receiving domain. The facsimile signals are scanned in, including by software, and forced into non-executable format for receiving domain processing. The two primary InfoSec issues are first that possibly contaminated raw data does not enter the protected domain. Second, the incoming bit stream, the data virtual carrier, is not reproduced inside the protected domain. This second requirement is addressed by not using a direct inverse of the sending facsimile transformation. The information extraction transformation must not be an inverse of this original facsimile transformation. For some applications, an additional but not necessary safeguard would be restricting external knowledge of the actual recovery transformation used for the protected domain. If we view the original facsimile transformation as the transport transformation, and the scanning or print formation function as the recovery transformation, the general examples following could serve as transport/recovery transformation pairs: EBCIDIC/ASCII Font i /font j Fax i /Fax j (where Fax j ≠Fax i ) text format/video format text format/printer format digital/analog digital format i /digital format j (where digital i ≠digital j ) signal format i /signal format j (where signal format i ≠signal format j ) The Hamming Distance between the bit representation of one character, in the transport transformation, to its equivalent representation in the recovery transformation could, in some instance, serve as a measure of appropriateness for transformation pairs. Obviously, other transformation pairs and acceptability metrics could be derived. The IDS process permits necessary information exchange between host computer systems and an external network without intrusion of (possibly corrupted) external data signals into the host. The modified-read process is a universal virus, worm, hostile executable code eliminator. This signal level, modified-read process operates below the software layer of a system. Thus, the process is not dependant on prior knowledge of hostile data structures (unlike conventional software-based anti-virus type packages) to neutralize such hostile data. This neutralization function is a primary host protection mechanism used by the IDS. Referring to FIG. 6, a television signal based version IDS 42 is disclosed. The host-system 45 is a Packard Bell PLT 2240 personal computer system. The external-domain 46 is the lntemet/world-wide-web. Any PC or network of PC's can be protected in this manner. The intermediate domain device (IDD) 47 is a webtv system, for example Phillips/Magnavox MAT960A1 Internet Unit. The IDS 42 permits commercial off the shelf components to be used in their normal expected usage scenarios, without modification of any kind. As further illustration of this point, a television (PCI bus) card 48 (for example a Hauppauge 401 card) of the host system is connected to the webtv system unit. These are signal transformation processes that are implemented for the required modified-read process of the IDS. Such processes isolate all incoming signals from program execution domains of the host system, while making the “information content” of the incoming signals available to the host system 45 . InfoSec integrity of the host is thus maintained. As shown in FIG. 6 , the tv card 48 transforms the output of the IDD 47 to a format different from that of the external domain 46 and which is processable by the host 45 . Also shown in the drawing figure is an actual television 49 which is connected to an input of the television card 48 and which is utilized to verify that a true television signal is being received at the card thus insuring the correct operation of the tv card. As opposed to sending a signal from the webtv 47 to the television card 48 , other signal transformations are possible, for example the signal can be outputted to a facsimile machine or printer 41 from the webtv IDD 47 . The printer constitutes a signal transformation processor which preserves the information in a printed format as received from the webtv IDD 47 . The preserved transformed signals of the print copy from the printer 41 can be scanned by a scanner 44 to create a transformed signal which can be provided to the host system 45 . A standard telephone 43 is also shown in the drawing figures and is utilized to check operation of the communications link between the IDS 42 (including the webtv system 47 ) and the external domain 46 . With continued reference to FIG. 6 , the invention may also be used to protect the host during the updating of host system files. As shown, the host 45 may be connected at socket 50 such that files from the host can be downloaded to the IDD 47 of the IDS 42 . In this embodiment, (which excludes use of a webtv type IDD) the file information is retained in a file buffer in the IDD. The IDD receives signals from the external domain and processes the signals as described in FIG. 5 with respect to IDD 40 to thereby perform the modified-read process and obtain signals having a different data set. Information is extracted from the initial data set in such a manner as to derive a second data set which is then sent to the file buffer to update the file information downloaded from the host 45 and the updated file is thereafter forwarded as a tv signal to the socket or tv card 48 of the host. Thus, the file of the host is updated without any undesirable data being transmitted to the host system. In some embodiments no host to IDD socket exists. Thus, no signal path for exfiltration of the domain signals is available. With the protected system thus isolated from cyberspace and/or other hostile domains, it can be safely connected to a classified domain/network without danger of compromise to that classified domain. The intermediate domain system of the present invention is a system within a system type architecture wherein such systems and subsystems may be activated and deactivated to achieve maximum IDS functional flexibility. As an example, if the IDS is implemented to reside internal to his host, the host interface module is activated. If the IDS is implemented to reside external to the host, a communication subsystem linked to the host/internal domain is used to embody an outgoing socket between the protected host and the IDS similar to socket 17 of FIG. 2 . In either case, the modifiedread subsystem includes the incoming socket from the external domain. With reference to FIG. 7 , the IDS operation will be described in detail. A data set, possibly contaminated, is received by the communication subsystem where it is important to note that the data set is carried in a signal format as previously discussed and the signal format may also be corrupted. The processing data flow controller subsystem accesses the received data set and determines if it is program and/or control data that must be executed. If program execution is required, the data set is transferred to the external processing domain (of the IDD) for execution and the results of the execution are returned to the processing data flow controller subsystem for transfer to the modified-read subsystem. If no program execution is required, the processing data flow controller subsystem transfers the data set to the modified-read subsystem directly. The modified-read subsystem operates as described with respect to the embodiment of FIG. 5 discussed above. FIG. 8 illustrates a multifunction IDS configured for video teleconferencing. The IDS chassis 51 is that of its host such as 45 of FIG. 6 , if the IDS is implemented to reside internal to its host. In this case, all add-in cards of FIG. 8 (i.e. cards 52 a, 52 d 52 b, 52 c, and 54 ; whereby card 52 a is a modified single board computer (SBC) and card 52 d is a video capture card, card 52 b is a graphics accelerator, 52 c is a sound card, card 54 is a modem type embodying an external domain interface socket. The socket may be in the form of a modem board or a network or cable interface type card. The cards 52 a, 52 b, and 52 c comprise the intermediate-domain-device (IDD) of the IDS. As shown, an IDS can reside internal to its host, if its SBC's interface to the host's expansion bus is configured as an add-in card. The SBC 52 a thus uses only devices directly connected to it, and not those devices connected to the host's expansion bus. For the case of an IDS implemented to reside external to its host, the add-in cards reside on the passive backplane of the IDS chassis 51 . The SBC 52 a implementing the control module of the IDD, controls the IDS from its slot on the IDS device's passive backplane. Cards 53 and 53 a form a socket, and are a tv card 53 and a sound card 53 a both residing in the host system's expansion bus. Socket 57 is a one-way direct cable connect (DCC) link from the host system to the SBC and is used for direct data transfers to the IDD. Modules 31 , 32 , 33 and 35 (from FIG. 5 ) reside in the SBC 52 a . The internal hard drive 62 is connected to the IDD's SBC 52 a and resides in a bay in the chassis 51 of the IDS or, the chassis of the host, if the IDS resides internal to the host. A compact-disk (CD) drive 63 , backup tape drive 64 , floppy disk drive 65 , and the smart-card reader 66 can each reside internal to or external to the chassis 51 , where each device is connected to the IDD's SBC 52 a , permitting the IDS to operate as an independent system whether residing internal to or external to its host. A joystick 67 as well as a microphone 68 are connected to the IDD sound card 52 c , to support telephony, video telephony, network gaming, and video conferencing type functions. In addition to its InfoSec functions (and those just mentioned), the IDS is ideal as a special function platform, which frees the host for simultaneous execution of other tasks. Video monitor (VGA) signals 69 , move from 52 a to 52 b to socket 53 . Audio signals 70 move from 52 c to socket 53 a . This video and audio information transfer is a video based modified-read process. Signals 72 and 73 are video and audio output from the host domain. Signals 71 from a keyboard or mouse 75 are applied to the IDD's SBC 52 a . Finally, a video camera 74 necessary for video conferencing and video telephony operations is connected to the card 52 d of the IDS. Using the teachings of the invention, all incoming signals from all input sources such as to the modem 54 which receives signals from the external domain 80 , the camera 74 , disk drive 63 , tape drive 64 , floppy disk drive 65 , smart card reader 66 , joy stick 67 and microphone 68 , are processed through the cards 52 a , 52 b , 52 c , 52 d acting as the IDD and are transformed so that the host/protected domain remains safe and isolated from the external signal source, which may be contaminated. If a desktopvideo-conferencing (DVC) type card is used for an input socket 54 , instead of a standard modem, microphone and video camera inputs could go directly to the DVC card. A V.90 standard (or better) compatible modem is recommended for older telephone system type videophone usage. Other, high bandwidth, high performance modems and other communication type devices such as network interface cards, cable system interface devices may be used to embody socket 54 . All external signals, contaminated or not, are confined within the IDD. Referring to FIG. 9 , there is illustrated a prior-art single board computer (SBC). In systems containing prior-articonventional SBC devices 100 , the SBC is the central control module for those systems. The SBC performs the function of a motherboard, and provides an on-board expansion-bus and connector ports 105 , 105 ′, 105 ″ where peripheral devices can be connected to it. The SBC normally resides in the passive backplane 104 of its hosting system and via the bus arbitration means 103 (of the SBC), the activity of other devices connected to the passive backplane is controlled by the SBC. Thus, multiple SBC devices on the backplane of a system would conflict especially in the bus arbitration function. Modern SBC devices are powerful computer systems which could greatly enhance the functional capability of other information systems, if the SBC could be modified to operate as an add-in card to its hosting system. As an example, bus arbitration conflicts can be resolved by deactivation of the SBC device's bus arbitration control signals. This is a primary modification needed for SBC devices to operate as add-in cards, to their hosting system. Referencing FIG. 10 , an SBC 110 to be used as an IDD residing internal to its' host, must be modified in the manner of FIG. 10 wherein the bus control and arbitration signals 112 are deactivated such as by grounding at 113 and the bus master/slave signals 116 , 117 and 118 are enabled such that the modified SBC (MSBC) 100 interfaces to the host peripheral bus 104 as a standard add-in card. The PCI bus specification is used in FIG. 10 to illustrate this generic modification procedure. The modified SBC retains its' internal/on-board connections 115 , 115 ′ and 115 ″ to which SBC dependent peripheral devices may be connected thus forming a “system within a system” capability for the host. When modifying the SBC for use in a “system within a system” environment, the following procedures must be followed: a) the SBC arbitration-control signals must be disabled to prevent control arbitration of the protected systems expansion-bus by the SBC; b) enabling only the bus-master and bus target capability of the modified SBC which respectively permits initiating and reception of expansion-bus data set transfers; and c) ensuring that the interface to the protected system's expansion bus can not act as a bridge module between the protected system's expansion bus and the IDD device's on-board local bus, thus isolating on-board bus connected devices from the protected system's expansion-bus connected devices and enabling a secure “system within system” architecture. The three generic modifications discussed above are achieved for example when the protected systems expansion bus conforms to the peripheral component interconnect (PCI) bus 104 by allowing the modified SBC add-in card 100 functioning as the IDD to assert an REQ&num; (a bus request) at 116 and to only receive GNT&num; (bus grant) control signals 117 , and ACK&num; (acknowledge) type signals 118 in a PCI configuration, thus ensuring the IDD peripheral devices are not directly accessible from the protected system's expansion bus. A multiplicity of such modified SBC systems can be used in a single IDD, to render that IDD extremely fault-tolerant, and dynamically flexible. Referring to FIG. 11 , an embodiment 122 of the invention configured to monitor and control a multiplicity of other embodiments of the invention (as defined in FIG. 10 ) is illustrated. The control function involves fundamentally, a reset capability, and an activate/ deactivate capability. The reset function/capability involves initiation of a “cold-boot” type cycle (of start-up or initialization sequences) for the embodiments of the invention that are being monitored. The activate/deactivate function involves respectively, the means to “bring on-line” or “take off-line” an embodiment of the invention that is being monitored by the device type of FIG. 11 . As an example operational scenario, where a multiplicity of devices of the type in FIG. 10 are monitored by the device of FIG. 11 , and are employed to control inter-domain signal traffic flow, the reset function would be automatically activated for all off-line devices, thus providing a cleaning/scrubbing type function to remove any contaminants received (by these off-line devices) from signals injected during their previous on-line periods. Scrubbed/decontaminated off-line devices would be activated if/when particular application performance measurements dictate augmentation of the set of active devices was necessary. Conversely, if performance measurements dictated, active devices would be taken off-line to maximize efficiency. Such performance measurements are continually taken by the monitoring and control embodiment of the invention. The invention has the means to analyze the performance measurements and initiate the “application specific” appropriate action (related to the multiplicity of devices it is monitoring) based on such performance measurement analysis. Thus, fault-tolerance techniques, security techniques, dynamic reconfiguration, advanced high-speed communications and other advanced system performance and reliability enhancement can be efficiently achieved, by use of the invention defined in FIG. 11 . As an example, the invention, coupled with a high performance modem type device, could supply the processing horsepower for payload encryption of IP packets in a high-speed communications transceiving embodiment. Generally, the embodiment of FIG. 11 contains the deactivated bus interface signals 129 , the bus master control signals 116 , 117 , 118 , which permit add-in card type operation on the host system's expansion-bus 104 , and sensor ports 123 , 124 , 125 which connect to the device/ devices ( FIG. 10 ) being monitored. This monitoring and control device embodiment 122 is programmable and reconfigurable, and could operate with similar embodiments of the invention. Referring to FIG. 12 , an embodiment 130 of the invention is shown configured to operate as communication line encipher device for its host system. The device 130 connects to the communication subsystem of its host, generally via a modem type device 141 , by way of its host interface communications port 135 . The external domain interface port 136 can be linked to an external domain 140 , or to a cascade of like devices 130 ′ via the host interface port 135 ′ (and communications link 138 ) of the next device in such a cascade. FIG. 12 illustrates two such devices in cascade, wherein the second device 130 ′ is connected to the external domain 140 , via its external domain interface port 136 '. Each device of FIG. 12 exhibits the same generic structure. The host expansion-bus 104 hosts the cascade. The degenerate/basic cascade contains one device. The bus arbitration signals 131 (of device 130 ), 131 ′ (of device 130 ′) are disabled. Control system 132 , 133 , 134 (of device 130 ) and 132 ′, 133 ′, 134 ′(of device 130 ′) permit the invention to operate as an add-in card to its host. Peripheral devices ports 137 a , 137 b , 137 c (of device 130 ) and 137 a ′, 137 b ′, 137 c ′ of device 130 ′ permit enhanced operational and functional capability of the invention. Examples of such enhancements are efficient asymmetric cypher processing for entire data units, steganography, and other advanced cypher techniques. Referring to FIG. 13 , an embodiment 142 of the invention is shown configured to operate as a video subsystem enhancement to its host system. This embodiment of the invention has a VGA port 147 to receive signals from the video subsystem of its host. This embodiment connects to a video monitor type device via port 148 . Connectors 150 , 150 ′, 150 ″ are for use of application specific peripheral devices which can be employed for functional enhancement. An identical device 142 ′ is connected via waveguide 149 to peripheral port 150 ′ of device 142 , in this example. This is an additional example of cascading (included in the FIG. 12 example), to further enhance the function of the host system's video subsystem. In this example, the host expansion bus 104 interface for device 132 includes bus interface signals 144 , 145 , 146 , and the deactivated bus arbitration control signals 143 . Peripheral ports 140 and 140 ″, are also included in this example. The invention has the means to support such advanced video functions as scan-line-interleaving (SLI), data compression, signal conversion (as is done with current TV/video-capture add-in cards). The invention also has the means to support a plurality of multimedia ports such as port 147 , such that a composite of the signals input to the plurality, is output via port 148 . An example application, in support of IP-video-telephony type application, for the FIG. 13 embodiment of the invention is to operate as a real-time local video server or packet buffer. The Internet and the underlying public switch network route packets in many indirect ways, to maximize network performance and reliability. For conventional voice and data packets, this dynamic routing has little adverse affect on user-perceived transmission quality. Video, and video-telephony packets, however, have extremely critical time sequencing requirements, if quality of transmission is to be maintained. The invention has the means to buffer such video packets, in such manner as to maintain transmission quality (more accurately, re-establish transmission quality) by using store and forward, interleaving type processing techniques, and permitting local receiver/users to access the received information as is done from a video server. The difference here is the processing power and speed of the invention (modified SBC) providing the means to perform such functions in what appears to be real-time to users/receivers. Since this process is duplex (or half-duplex) capable, enhanced interactive video telephony is enabled. Further, it is important to note that the invention (modified single-board-computer (MSBC)) can be embodied as a commercial SBC unit modified to operate on the expansion-bus of a hosting system, as a PCMCIA (Personal Computer and Memory Card International Association) type device, as a CardBus type device, as a specially configured motherboard, as an embedded micro-controller type device, as an ASIC (application specific integrated circuit) device, or combination thereof, thus providing maximum flexibility and utility. Additionally, a multiplicity of such devices can be used, for example with one device functioning as a communications front-end to another device. This illustrates the scalable nature of the invention. It is expected that the present invention and many of its attendant advantages will be understood from the foregoing description and it will be apparent that various changes may be made in form, construction, and arrangement of the components and modules thereof, without departing from the spirit and scope of the invention or sacrificing all of its advantages, the forms hereinbefore described being merely preferred or exemplary embodiments thereof.