DATA TRANSFER

Abstract: A method of vetting a data transfer, said method including: transferring the data from an origin computer or computer network to a buffer; quarantining the buffer and vetting the data in the buffer; and releasing the data to a destination computer or computer network after the data has been vetted.

Description: "DATA TRANSFER" TECHNICAL FIELD This invention relates to a method and apparatus for data transfer. BACKGROUND ART It is often necessary to transfer data between otherwise segregated computers or computer networks. The transfer of data between computers or computer systems can present problems both in terms of security and hygiene . With classified computer systems it is important that there be a mechanism for preventing the inadvertent transfer of classified data to a non-classified computer system. Further, with all computer systems there is a need to ensure that viruses and the like are not inadvertently introduced with other data during a data transfer. DISCLOSURE OF INVENTION The invention resides broadly in a methodology or apparatus which quarantines and vets data during a data transfer. The quarantined data is vetted for security and/or hygiene prior to release to the destination computer or computer network. Representative manners in which the invention may be claimed are as follows. According to one aspect the invention resides in apparatus for vetting data during a data transfer from a first computer or computer network to a second computer or computer network, said apparatus including: - a buffer for receiving and quarantining data from the first computer or computer network; and means for vetting the data quarantined in the buffer prior to release of the data to the second computer or computer network. In one preferred embodiment the buffer will only receive and quarantine data in the form of displayable characters from the first computer or computer network and the means for vetting includes an output device which displays the quarantined data to the user prior to release of the data to the second computer or computer network. Preferably, the data cannot be released to the second computer or computer network unless all the quarantined data has been displayed to the user by the output device. To ensure this, in one embodiment the output device includes a cursor which must be scrolled by the user through the entirety of the quarantined data prior to the data being released from the buffer to the second computer or computer network. In another preferred embodiment the means for vetting includes hardware or software for vetting the quarantined data and, preferably, the hardware or software identifies and flags any non-displayable data in the buffer. In another aspect the invention resides in a work station including :- an input device selectively connectable to one of two or more computers or computer networks ; a buffer for quarantining data during transfer from a first computer or computer network to a second computer or computer network; and means for vetting the quarantined data prior to release of the quarantined data to the second computer or computer network. The preferred embodiment of the work station includes a switch. When the switch is in a first position, data from a first computer or computer system can be transferred to the buffer. When the switch is in a second position, the data in the buffer is quarantined and the data can be vetted. When the switch is in a third position, the vetted data can be released to a second computer or computer network. In a third aspect the invention resides in a method of vetting a data transfer, said method including: - transferring the data from the origin computer or computer network to a buffer; quarantining the buffer and vetting the data in the buffer; and releasing the data to the destination computer or computer network after the data has been vetted. BRIEF DESCRIPTION OF DRAWINGS Reference will now be made to the accompanying Figures which illustrate preferred embodiment (s) of the invention and in which: - FIG 1 is a schematic illustration of a first embodiment of a workstation; and FIG 2 is a schematic illustration of a second embodiment of a workstation. BEST MODE With reference to FIG 1 there is schematically illustrated a first embodiment of a workstation according to the invention. The workstation includes an input device, an output device and a secure transfer buffer which are selectively connectable via switches to either computer A or computer B. It will be understood that computer A and computer B may be individual computers or networks of computers. The three switches are ganged together for synchronised movement and each switch has three positions. In practice, the user manipulates a single actuator which simultaneously actuates all three switches. In FIG 1 the switch is shown in the intermediate position. It will be understood that when the switches are actuated to the left-most position, the input device, output device and secure transfer buffer are all connected to computer A. In this configuration, the user can manipulate and view data in computer A. Similarly, when the switches are all actuated to the right-most position, the input device, output device and secure transfer buffer are all connected to computer B. In this configuration, the user can manipulate and view data in computer B . In the intermediate position illustrated in FIG 1, the input device is isolated, and the secure transfer buffer and output device are connected together but are isolated from both computer A and computer B. Operation of this system is as follows and assumes that it is desired to transfer data from computer A to computer B. The process starts with the switches in the leftmost position. As discussed, in this position the input device, output device and secure transfer buffer are all connected to computer A. The input device is used to select data from computer A and send the data to the secure transfer buffer. Once the selected data has been transferred to the secure transfer buffer, the switch is moved to the intermediate position illustrated in FIG 1 in which the data in the secure transfer buffer is quarantined from the destination computer B. Whilst the data is quarantined in the secure transfer buffer, it can be viewed via the output device or vetted by other means. In a preferred embodiment the secure transfer buffer is configured such that the quarantined data must be fully viewed before it can be released. One way of ensuring this occurs is to insist that a cursor under the control of the user must be scrolled through the entirety of the quarantined data before the data can be released to the destination computer. In one embodiment, the secure transfer buffer is configured so that it can only receive displayable characters. Thus, it is ensured that the viewer of the output device is able to review all data quarantined in the secure transfer buffer. In other embodiments, this secure transfer buffer may be capable of receiving non- displayable characters in which case it will be necessary for hardware or software to screen the quarantined data to ensure that there is no hidden data, viruses or the like. Once the quarantined data has been satisfactorily vetted either by software, hardware or by viewing on the part of the user, the switch can then be actuated to the right -most position at which the data can be released to the destination computer B. Once the data has been released by the buffer, the buffer is cleared. Again, it is emphasised that the data can only be released to computer B once the data has been vetted to an acceptable security and/or hygiene level . It should also be noted that the act of switching causes a re-set or deletion of any data held in the input device or output device thereby ensuring that only data which has been quarantined and vetted can pass to computer B. Referring now to FIG 2 there is shown a second embodiment which is largely identical to the first embodiment with the exception of the inclusion of a second output device which is dedicated to the secure transfer buffer. Operation of this second embodiment is similar to the first embodiment however it will be explained again below to ensure clarity. Again, it is assumed that it is desired to transfer data from computer A to computer B. The process starts with all three switches in the left-most position in which input device, output device and secure transfer buffer are all connected to computer A. Data to be transferred is sent from computer A to secure transfer buffer. The switch is then moved to the intermediate position in which the secure transfer buffer is quarantined from all devices except for its dedicated output device . The dedicated output device has some» means for scrolling through the data displayed on the output device. As previously, in a preferred embodiment, the secure transfer buffer is only capable of receiving displayable characters from computer A. Thus, it can be ensured that all data in the secure transfer buffer can be viewed via the dedicated output device. Again, there may be some mechanism to ensure that the user views and vets all of the data which is quarantined in the secure transfer buffer. This may be done, for example, by insisting that a cursor be scrolled through the entirety of the data prior to release of the quarantine data being enabled. It is again mentioned that, in other embodiments, vetting of the data quarantined in the secure transfer buffer may be conducted by hardware or software or the like rather than by viewing on the part of the user. In the embodiment shown in FIG 2, once the user is satisfied that the data quarantined in the secure transfer buffer has been scrutinised to an acceptable level, then the switch can be actuated to the right-most position in which the input device, output device and secure transfer buffer are all connected to computer B. The vetted data can then be released to computer B. Once the data has been released by the buffer, the buffer and dedicated output device are cleared. Again, it is mentioned that the act of switching causes a re-set or deletion of any data retained by the input device and non-dedicated output device, thereby ensuring that the only quarantined and vetted data can be released to the destination computer. In conclusion, the invention provides a methodology and apparatus for transferring data between computers or computer networks in which the data is vetted prior to release to the destination computer or computer network. By this mechanism, both security and hygiene issues can be addressed. In one embodiment, the vetting of the data is the responsibility of the user who is obliged to view the quarantine data prior to releasing the data to the destination system. In other arrangements, the vetting of the data could be done by hardware or software. However, in either case, the data cannot be released to the destination system until it has been vetted. Furthermore, the system is designed such that data cannot pass by any other channel to the destination system thereby ensuring that only vetted data is released to the destination system. It will, of course, be realised that the above has been given by way of illustrative example (s) of the invention. Any variations, modifications, or omissions, as would be apparent to persons skilled in the art, are deemed to fall within the broad scope of this invention.

Claims: THE CLAIMS DEFINING THE INVENTION ARE AS FOLLOWS : - 1. Apparatus for vetting data during a data transfer from a first computer or computer network to a second computer or computer network, said apparatus including :- a buffer for receiving and quarantining data from the first computer or computer network; and means for vetting the data quarantined in the buffer prior to release of the data to the second computer or computer network. 2. Apparatus as claimed in claim 1, wherein the buffer will only receive and quarantine data in the form of displayable characters from the first computer or computer network and wherein the means for vetting includes an output device which displays the quarantined data to the user prior to release of the data to the second computer or computer network. 3. Apparatus as claimed in claim 2, wherein the quarantined data cannot be released to the second computer or computer network unless all the quarantined data has been displayed to the user by the output device. 4. Apparatus as claimed in claim 3, wherein the output device includes a cursor which must be scrolled by the user through the entirety of the quarantined data prior to the data being released from the buffer to the second computer or computer network. 5. Apparatus as claimed in claim 1, wherein the means for vetting includes hardware or software for vetting the quarantined data. 6. Apparatus as claimed in claim 5, wherein the hardware or software identifies and flags any non-displayable data in the buffer. 7. A work station including :- an input device selectively connectable to one of two or more computers or computer networks ; a buffer for quarantining data during transfer from a first computer or computer network to a second computer or computer network; and means for vetting the quarantined data prior to release of the quarantined data to the second computer or computer network. 8. A work station as claimed in claim 7 and further including a switch, wherein when the switch is in a first position data from a first computer or computer system can be transferred to the buffer, when the switch is in a second position the data in the buffer is quarantined and the data can be vetted, and when the switch is in a third position the data can be released to a second computer or computer network. 9. A method of vetting a data transfer, said method including : - transferring the data from a origin computer or computer network to a buffer; quarantining the buffer and vetting the data in the buffer; and releasing the data to a destination computer or computer network after the data has been vetted. 10. A method as claimed in claim 9, wherein the buffer is only capable of receiving and quarantining data in the form of displayable characters and the vetting process involves displaying the quarantined data to the user. 11. A method as claimed in claim 10, wherein all of the data quarantined in the buffer must be displayed to the user before the data can be released to the destination computer or computer network.

Inventors: ASHCROFT CHARLES ANTHONY, LAW COLIN ROBERT, MOGG PETER, ASHCROFT, CHARLES, ANTHONY, LAW, COLIN, ROBERT, MOGG, PETER
Applicants: ASHCROFT CHARLES ANTHONY, COMPUCAT RESEARCH PTY LTD, LAW COLIN ROBERT, MOGG PETER, ASHCROFT, CHARLES, ANTHONY, COMPUCAT RESEARCH PTY. LTD., LAW, COLIN, ROBERT, MOGG, PETER
Application year: 1999
Main classification: G06F11
IPC codes: G06F1, G06F21