Secure KM Switch for Isolated Computers
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current solutions for allowing a single user to interact with multiple isolated computers securely while viewing multiple displays simultaneously are either cumbersome, expensive, or insecure, as they either require multiple sets of peripherals, rely on insecure interconnect cables, or lack flexibility in video output management.
Innovation Solution
A secure Keyboard Mouse (KM) switch with unidirectional data flow enforcement and host emulators that allow a single set of peripherals to interact with multiple isolated computers, ensuring data security and seamless user experience without interconnect cables, using a system controller for channel selection and device authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple displays and multiple sets of user peripheral devices are used to access multiple isolated computing systems, then data security isolation is ensured, but usability deteriorates and desktop space is consumed
Solution Approach 1:
The patent introduces a KVM switch as an intermediary device that mediates between the user's single set of peripherals and multiple isolated computing systems. The KVM switch allows the user to connect one keyboard, video display, and mouse to multiple computers, switching between them without requiring multiple peripheral sets. This resolves the contradiction by providing both security isolation (no direct connection between isolated systems) and improved usability (single peripheral set for multiple systems).
Solution Approach 2:
The KVM switch serves multiple functions: it acts as a peripheral router, a video switch, and a control interface. A single KVM switch device handles keyboard input routing, video output switching, and mouse control for multiple isolated computing systems simultaneously. This multi-functionality eliminates the need for separate peripheral sets while maintaining security isolation.
2Ease of operation
If KVM switch is used to enable user interaction with multiple isolated computers through one set of peripherals, then desktop space is reduced and usability is improved, but data leakage risk increases
Solution Approach 1:
The patent segments the KVM switch functionality into distinct isolated channels for each computing system. Each computer connection is electrically isolated from others within the KVM switch, creating separate data paths. This segmentation allows the user to interact with multiple isolated computers through one peripheral set while preventing data leakage between the isolated systems, as each system's data path remains physically separated.
3Ease of operation
If Secure KVM supporting multiple displays is used to allow users to see multiple displays simultaneously, then usability for monitoring is improved, but flexibility is reduced and cost increases
Solution Approach 1:
The patent extends the KVM switch functionality from traditional single-display switching to multi-display support by adding video output switching capabilities. The KVM switch can now route video signals from multiple computers to multiple displays simultaneously or in combination, creating a multi-dimensional display arrangement. This allows users to monitor multiple isolated systems across multiple displays while maintaining the same flexible peripheral sharing model, without requiring specialized expensive equipment.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A system enabling a computer user to securely share a single set of keyboard and mouse (KM) among multiple isolated computers. The system enables one set of peripheral devices to independently interact with multiple coupled isolated computers through mouse position analysis on a virtual display area corresponding to multiple physical user displays of the particular installation. The system may be used to enable computer user having multiple isolated computers each with one or more coupled display to automatically switch a single set of keyboard mouse and other peripheral devices between the different computers. As isolated computers may have different security levels, the method and apparatus of the present invention prevents and potential data leakages between computers and coupled networks.