Support of limited write downs through trustworthy predictions in multilevel security of computer network communications

摘要

A method is disclosed for limited write downs of data from higher security classification users to lower security classification users across computer networks, while preserving the security of classified data at the higher security classification user from covert transmission via acknowledgment messages from the higher user to the lower user. The intended acknowledgment message is released to the lower user when it matches the user content of a predicted acknowledgment message. In TCP/IP interface applications, the acknowledgment messages are IP based data transfer protocols acknowledging the transfer of data from the lower side to the higher side. With IP datagram transfers, deterministic portions are predicted and non-deterministic portions are identified. Where the number of non-deterministic bits exceed a predetermined rate, the acknowledgment message is discarded.