Nelson F Rodriguez

US Patent:

20150215279, Jul 30, 2015

Filed:

Jan 30, 2014

Appl. No.:

14/168283

Inventors:

- Sparks NV, US
Andrew Feldkamp - Littleton CO, US
Nelson Rodriguez - Highlands Ranch CO, US
Joshua Edwards - Castle Roak CO, US

Assignee:

Sierra Nevada Corporation - Sparks NV

International Classification:

H04L 29/06

Abstract:

A cyber-security device provides secure communications bi-directionally between an external network and an internal network including a supervisor control and data acquisition (SCADA) device. The device includes a processor in data communication with the external and internal networks, the processor being programmed with a rule-set establishing validation criteria configured to validate data received from the external and internal networks. The processor is operable in an operational mode to pass between the external and internal networks only data that are compliant with the validation criteria. The processor is re-programmable with a new rule-set only in a programming mode. The device includes a switch that is manually operable to switch the processor from the operational mode to the programming mode.

US Patent:

20150215283, Jul 30, 2015

Filed:

Mar 25, 2015

Appl. No.:

14/668602

Inventors:

- Sparks NV, US
Andrew Feldkamp - Littleton CO, US
Nelson Rodriguez - Highlands Ranch CO, US
Joshua Edwards - Castle Rock CO, US

Assignee:

Sierra Nevada Corporation - Sparks NV

International Classification:

H04L 29/06
H04L 29/08

Abstract:

A cyber-security system, including a device and associated method, provides secure communications bi-directionally between an external network and an internal network, including a supervisor control and data acquisition (SCADA) device. The device includes a processor in data communication with the external and internal networks that is programmed with a rule-set establishing validation criteria configured to validate data received from the external and internal networks. The processor is operable in an operational mode to pass between the external and internal networks only data that are compliant with the validation criteria. The processor may be configured to save certain validated data indicating a system state that can inform the application of the rule-set to data. The processor is re-programmable with a new rule-set only in a programming mode. The device includes a switch that is manually operable to switch the processor from the operational mode to the programming mode.