Patent ID: 8904556

Claim:
A system, comprising: a first Network Interface Device (NID) and a first data router configured for operating with a first network, the first network having a first level of security; a first processor configured for processing data for the first network; a second NID and a second data router configured for operating with a second network, the second network having a second level of security; a second processor configured for processing data for the second network; a Cross Domain Guard (CDG) and a Cryptographic Sub-System (CSS) implemented between the first data router and the second data router; a first graphics server configured for controlling graphics for the first network; a second graphics server configured for controlling graphics for the second network; a Multi-Level Security (MLS) merge plane configured for receiving graphics control information from the first and second graphics servers and merging the graphics control information onto a virtual coordinate space for display; and an input device manager configured for receiving user input from a plurality of input devices and securely distributing user input to an intended graphics server, said intended graphics server being one of the first and second graphics servers, wherein the input device manager is further configured for: determining whether an user input is a selection input or a message input; identifying an active display according to the user input when the user input is a selection input; sending the user input only to the identified graphics server that corresponds to the active display; identifying an active display element being controlled by the identified graphics server; and sending the user input only to an application that owns the active display element.