Multi-Level Security System with Block-Level Cryptographic Separation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current multi-level security systems face challenges in securely sharing files across different security levels, particularly in network-centric warfare and operations, where existing solutions either restrict data sharing or incur high costs and inefficiencies due to redundant storage and complex encryption methods.
Innovation Solution
A multi-level security system that employs a partitionable storage medium with enclaves assigned different security classification levels, enabling cryptographic separation at the disk block level and a reference monitor to enforce secure read-down and write operations between enclaves, allowing secure information flow while maintaining data separation and reducing redundant storage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If separate file stores are maintained for each security enclave with complete copies of lower enclave data, then data separation and security are ensured, but storage space is wasted and system weight increases
Solution Approach 1:
The patent merges multiple security enclaves into a single shared file store, eliminating the need for separate physical storage for each enclave. The unified file store contains all data from all security levels, with cryptographic labels indicating the origin and classification of each data block, thereby reducing redundant storage while maintaining security boundaries.
Solution Approach 2:
Instead of maintaining complete duplicate copies of lower enclave data in each higher enclave's file store, the patent uses cryptographic references and labels to represent data blocks. Each data block is stored once with its security classification label, and access control is enforced through cryptographic verification rather than physical data duplication.
2Device complexity
If whole files are encrypted instead of individual disk blocks, then encryption overhead is reduced, but file retrieval time increases as entire files must be read and decrypted
Solution Approach 1:
The patent segments the file store into individual disk blocks, with each block independently encrypted and labeled with its security classification. This allows the system to retrieve and decrypt only the specific blocks needed for a given operation, rather than encrypting or decrypting entire files, thereby reducing retrieval time while maintaining cryptographic security at the block level.
3Reliability
If data is stored at higher security levels, then security protection is enhanced, but system weight and power requirements increase
Solution Approach 1:
The patent applies local quality by storing each data block at its inherent lowest required security level rather than elevating all data to the highest security level. The unified file store contains data blocks with varying security classifications, and access control is enforced through cryptographic labels and reference monitor verification, allowing the system to maintain security protection while minimizing the weight and power requirements associated with higher security level storage.
Data Source
AI summary
A multi-level security system includes a storage medium partitionable into a plurality of partitions, a file system coupleable to the plurality of partitions, and a plurality of enclaves. Each enclave is assigned a security classification level. Each enclave resides in a different storage partition of the storage medium. Data stored on the storage medium is cryptographically separated at rest on a per-enclave basis. Cryptographic separation occurs at the disk block level, allowing individual blocks to be read and decrypted. The system also includes a reference monitor that enforces a system security policy that governs access to information between the enclaves. The reference monitor allows an enclave having a first classification level to securely read-down to an enclave having a second classification level lower than the first classification level and to write to another enclave having the first classification level.