Secure Deterministic Fabric Switch for Multi-Level Security Isolation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional secure computing platforms operate under a single level of security, which is inefficient and costly, requiring dedicated equipment and certification challenges when multiple security levels are needed, such as in military aircraft with both military and civil systems, leading to logistical and weight issues due to physical separation and redundant resources.
Innovation Solution
A Secure Deterministic Fabric (SDF) switch system that allows reconfigurable multiple levels of security within a single platform by dynamically assigning security levels to processing resources and payloads on power-up, using a SDF switch element connected to a Remote Interface Unit (RIU) and General Purpose Processor (GPP), with a control module for managing power and configuration compliance.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If physical separation and dedicated equipment are used to maintain multiple security levels, then security isolation is improved, but device complexity and weight increase
Solution Approach 1:
The patent combines multiple security levels into a single processing system using a reconfigurable fabric switch that can dynamically partition processing resources among different security classifications. This merging approach eliminates the need for separate physical systems while maintaining security isolation through software-based partitioning and controlled data flow paths.
Solution Approach 2:
The fabric switch serves multiple functions by supporting different security levels simultaneously and reconfiguring to accommodate various mission requirements. A single processing element can be dynamically assigned to different security levels based on operational needs, making the system universal rather than dedicated to specific security classifications.
2Reliability
If dedicated equipment and wiring are installed for each security level, then security isolation is improved, but weight and cost increase
Solution Approach 1:
Multiple security level infrastructures are merged into a single shared fabric switching system. The same physical wiring and processing elements are reused across different security levels through time-multiplexed and space-multiplexed partitioning, eliminating redundant weight while maintaining isolation through controlled access paths.
3Reliability
If processing resources are permanently assigned to specific security levels, then security isolation is improved, but adaptability decreases
Solution Approach 1:
The system transitions from static, permanent assignments to dynamic, reconfigurable resource allocation. The fabric switch can be reconfigured in real-time to assign processing elements to different security levels based on mission requirements, allowing the same hardware to adapt to varying operational needs while maintaining security boundaries through controlled data paths.
4Reliability
If redundant processing elements are installed for different security levels, then security isolation is improved, but device complexity and cost increase
Solution Approach 1:
Redundant processing elements are eliminated by merging security level separation into the fabric switching fabric itself. The switching fabric creates logical partitions and isolated data paths, allowing a single set of processing elements to serve multiple security levels without requiring duplicate hardware for each classification.
Data Source
AI summary
A Secure Deterministic Fabric (SDF) switch architecture and design may provide a cost effective reconfigurable Multiple Single Levels (MSL) of Security implementation that is low risk to certify and may not require recertification after an initial certification evaluation. The SDF switch enables assignment of processing resources and attached payloads to a specific security level fabric for use by an operational system. The assignment of defined security levels is commanded by a SDF control and status module without changing certification, aircraft wiring, or revising hardware. The processing resources are statically assigned during power up on a per mission basis or dynamically reassigned between security levels during a mission as processing requirements may change as a result of mission stage. The SDF switch supports mission defined security configurations for individual security level operational payload processing.