USB security gateway

Abstract

A USB gateway connected to a plurality of host computers having a USB device port connect to a peripheral device; and a security circuitry. The security circuitry comprises: a pre-qualification microcontroller; a mode select switch connected to the peripheral device port and selectively connecting it to one of: the pre-qualification microcontroller; or to a host selector switch that switches among the plurality of connected host computes. An enumeration and reset detector is connected to the USB peripheral device port to monitor that port and casing the mode select switch to switch back to the pre-qualification microcontroller when the peripheral device is disconnected or reset. The pre-qualification microcontroller is capable of enumerating a connected peripheral device and controlling the gateway according to a table containing lists of: device qualifications, indication of which device can connect to each host, and direction of data flow between host and device. The table of peripheral device qualifications may be field re-programmed.

Description

FIELD OF THE INVENTION[0001]The present invention relates to a Secure USB Gateway device capable of securely communicate with a plurality of USB peripheral devices and one or more host computers. More specifically the present invention relates to a device capable of enforcing a detailed USB peripherals security policy on connected computer.BACKGROUND OF THE INVENTION[0002]Computer networks in many organizations are continuously challenged by various security threats. The popularity of the internet and the availability of portable mass-storage devices introduce severe internal and external threats to most organizations. Defense and government organizations with higher security networks are forced to isolate their secure networks from other less secure networks thus creating a situation that a single organization or a single employee need to operate in several different isolated networks having different security levels. Isolation between these networks is a key concern as a small lea...

AI Technical Summary

Benefits of technology

[0024]Some exemplary embodiments of the current invention provide a stand alone unit that performs at least some of the functionality of dedicated peripheral po

Problems solved by technology

Computer networks in many organizations are continuously challenged by various security threats.

The popularity of the internet and the availability of portable mass-storage devices introduce severe internal and external threats to most organizations.

Defense and government organizations with higher security networks are forced to isolate their secure networks from other less secure networks thus creating a situation that a single organization or a single employee need to operate in several different isolated networks having different security levels.

Isolation between these networks is a key concern as a small leakage of data between two networks may cause catastrophic results to the organization involved.

In the past several years many of the traditional and

Images