GB2358996A - Network security device - Google Patents

Abstract

A network security device 1 has a switching circuit which prevents any physical connection being made to a protected network until a connection has been authorised by the network. A remote system wishing to gain access to the protected network dials and connects to the input section 1a of the device. The device prompts the remote system for identification. After receiving identification the processing section 1b disconnects the input section 1a thereby isolating the remote system from the device. The processing section then connects to the output section 1c, establishes a secure connection to the protected network and passes on the identification information. The processing section erases the identification information supplied and disconnects from the output section before reconnecting to the input section enabling it to accept the next request. The protected network authenticates then contacts the remote system.

Description

2358996 1 Network Security Device The invention is an electronic

communications network security device that prevents any unauthorised access to any electronically controlled network.

Many types of network security devices exist but there are none more secure than this device or that could not be enhanced by its addition.

Existing systems suffer from the drawback of allowing potential intruders to physically connect to the network before they are recognised by the network as not having authorisation. This physical connection allows intruders the potential to gain access to confidential information that would include authorised users details.

An object of this invention is to prevent any connection to the targeted network before the connection has been fully authenticated by the network.

Our invention prevents any physical connection being made to the protected network/s until a validated connection is authorised by the network. In short, at no time is the potential intruder physically attached to the targeted device. The invention holds no information that would be of help to a potential hacker, in so much as it stores no names, passwords or any details of the authorised users.

The invention is an electronic device that does not have to be at the same location as the network/s that it is protecting. It can be a stand- alone device or incorporated into a computer.

A specific embodiment will now be described by way of an example with reference to the accompanying line drawings in which:- Figure 1: Shows a simple block diagram of the Network Security Device.

Figure 2: Shows a typical remote access application.

Referring to the drawing, Figure 1, the Network Security Device 1. Comprises of an Input Section 1 a. A Processing Section lb. And an Output Section 1 c. The Processing Section lb. incorporates Fail Safe circuitry that prevents the Input Section 1 a. and the Output Section 1 c. from being connected to the Processing Section lb. simultaneously Referring to the drawing figure 2, In order for a Remote System 2. to gain access to the Protected Network 3. the Remote System 2. dials and connects to the Input Section 1 a. of the Network Security Device 1. The Network Security Device 1. prompts the Remote System 2. for identification. After receiving the identification from the Remote System 2. the Processing Section lb. disconnects the Input Section 1 a. thereby breaking, the Remote System 2. connection from the Network Security Device 1. The Processing Section lb. then connects to the Output Section lc. establishing a secure connection to the Protected Network 3. And passes on the identification supplied. The Processing Section 1 b. erases the identification supplied and disconnects from the Output Section 1 c. before reconnecting the Input Section 1 a. enabling it to accept the next request.

The Protected Network 3. authenticates the Remote System 2. using the identification forwarded from the Network Security Device 1. Authenticated Remote Systems are contacted by the Protected Network 3. using the identification information stored. Non-authenticated attempts are not contacted but the attempt may be logged for future reference.

In the example in figure 2, the Remote System 2. is contacted by the Protected Network using a dial out only Public Service Telephone Network connection, PSTN 5.

I-

Claims (7)

1. A network security device that prevents any unauthorised access to any electronically controlled network. The object of this invention is to prevent any connection to the targeted network/s before the connection has been fully authenticated by the network. The invention prevents any physical connection being made to the protected network/s until a validated connection is authorised by the network. This is accomplished by a Fail Safe switching circuit incorporated within the device. In short, at no time is a potential hacker physically attached to the targeted device.
2. 2. A Network Security Device as claimed in claim 1 That holds no information that would be of help to a potential hacker, in so much as it stores no names, passwords or any details of the authorised users.
3. A Network Security Device as claimed in claims 1 & 2 That does not have to be at the same location as the network/s that it is protecting.
4. 4. A Network Security Device as claimed in claims 1, 2, & 3. But using a solid state switching device.
5. 5. A Network Security Device as claimed in claims 1. 2, & 3. But using an electromechanical switching device.
6. 6. A Network Security Device as claimed in claims 4, & 5. Incorporating any combination of industry standard and proprietary interfaces in the input output sections.
7. 7. A Network Security Device as claimed in claims 4, 5, & 6. Incorporating any combination of industry standard and proprietary security protocols in the input output sections.

   A Network Security Device as claimed in claims 4, 5, & 6. Manufactured as a stand alone item or as a device incorporated into a larger system.