Abstract: A method for secure communications between a transmitting computer and a receiving computer includes transmitting data from the transmitting computer over a first one-way link to a data security engine, receiving and validating the data within the data security engine, and, after validating the data, transmitting the data from the data security engine to the receiving computer over a second one-way link.

Abstract: A method for secure communications between a transmitting computer and a receiving computer includes transmitting data from the transmitting computer over a first one-way link to a data security engine, receiving and validating the data within the data security engine, and, after validating the data, transmitting the data from the data security engine to the receiving computer over a second one-way link.

Abstract: A method for secure communications between a transmitting computer and a receiving computer includes transmitting data from the transmitting computer over a first one-way link to a data security engine, receiving and validating the data within the data security engine, and, after validating the data, transmitting the data from the data security engine to the receiving computer over a second one-way link.

Abstract: A system, method, and computer product, the system comprising: a transmitter configured to transmit a multiplicity of commands related to managing usage of a screen in accordance with one or more rules, the multiplicity of commands sent at intervals during an applicability time period of a rule; and a receiver operatively connected to the screen, the receiver configured to receive the commands from the transmitter and apply the commands to the screen, thereby managing usage of the screen for the applicability time period of the rule, wherein the transmitter and the receiver communicate with each other using authenticated communication.

Abstract: A method for secure communications between a transmitting computer (24) and a receiving computer (22) includes transmitting data from the transmitting computer over a first one-way link (28) to a data security engine (26), receiving and validating the data within the data security engine, and, after validating the data, transmitting the data from the data security engine to the receiving computer over a second one-way link (30).

Abstract: A method for secure communications between a transmitting computer and a receiving computer includes transmitting data from the transmitting computer over a first one-way link to a data security engine, receiving and validating the data within the data security engine, and, after validating the data, transmitting the data from the data security engine to the receiving computer over a second one-way link.

Abstract: Storage apparatus (20) includes a memory (30) and an encryption processor (28), which is configured to receive and encrypt data transmitted from one or more computers (24) for storage in the memory. A one-way link (32) couples the encryption processor to the memory so as to enable the encryption processor to write the encrypted data to the memory but not to read from the memory.

Abstract: Decryption apparatus includes an input memory (48), which is coupled to receive encrypted data, and an output transducer (28), for presenting decrypted data to a user. A decryption processor (50) is coupled to read and decrypt the encrypted data from the input memory but is incapable of writing to the input memory, and is coupled to convey the decrypted data to the output transducer for presentation to the user.

Abstract: Storage apparatus (20) includes a memory (30) and an encryption processor (28), which is configured to receive and encrypt data transmitted from one or more computers (24) for storage in the memory. A one-way link (32) couples the encryption processor to the memory so as to enable the encryption processor to write the encrypted data to the memory but not to read from the memory.

Abstract: Storage apparatus (20) includes a memory (30) and an encryption processor (28), which is configured to receive and encrypt data transmitted from one or more computers (24) for storage in the memory. A one-way link (32) couples the encryption processor to the memory so as to enable the encryption processor to write the encrypted data to the memory but not to read from the memory.

Abstract: Decryption apparatus includes an input memory (48), which is coupled to receive encrypted data, and an output transducer (28), for presenting decrypted data to a user. A decryption processor (50) is coupled to read and decrypt the encrypted data from the input memory but is incapable of writing to the input memory, and is coupled to convey the decrypted data to the output transducer for presentation to the user.

Abstract: Storage apparatus (20) includes a memory (30) and an encryption processor (28), which is configured to receive and encrypt data transmitted from one or more computers (24) for storage in the memory. A one-way link (32) couples the encryption processor to the memory so as to enable the encryption processor to write the encrypted data to the memory but not to read from the memory.

Abstract: Sensing apparatus includes a network camera, which is configured to capture images of a scene and to output a sequence of data packets containing digitized video data responsively to the images. A one-way link is coupled to the network camera so as to transmit the data packets from the network camera to a packet communication network.

Abstract: Storage apparatus (20) includes a memory (30) and an encryption processor (28), which is configured to receive and encrypt data transmitted from one or more computers (24) for storage in the memory. A one-way link (32) couples the encryption processor to the memory so as to enable the encryption processor to write the encrypted data to the memory but not to read from the memory.

Abstract: A computer-implemented method for protecting a computer network (22) includes receiving at a gateway (24) data transmitted from a source address for delivery to a destination on the computer network. The data are encrypted at the gateway using an encryption key selected from a set of one or more keys that are not available to the source address. The encrypted data are transmitted over the computer network toward the destination. The transmitted encrypted data are received and decrypted for use at the destination by means of one of the keys in the set.

Abstract: Sensing apparatus includes a network camera, which is configured to capture images of a scene and to output a sequence of data packets containing digitized video data responsively to the images. A one-way link is coupled to the network camera so as to transmit the data packets from the network camera to a packet communication network.

Abstract: Sensing apparatus includes a network camera, which is configured to capture images of a scene and to output a sequence of data packets containing digitized video data responsively to the images. A one-way link is coupled to the network camera so as to transmit the data packets from the network camera to a packet communication network.

Abstract: A method for authentication includes, in a first computer (14), receiving from a second computer (16) over a net-work (18) a communication containing an identification token. At the first computer, the identification token is stored only in a memory (30) of an information protection device (20), which is connected to the first computer by a local interface (34).

Abstract: A method for communication includes initiating a communication session over a network between a remote computer (24) and a local computer (20), which has a central processing unit (CPU) (40) and an input device (30). A record is stored at the remote computer of an identification code that is associated with the input device of the local computer and is inaccessible to the CPU. When data input by a user to the local computer is received via the input device, a cryptographic signature over the data and the identification code is generated at the local computer using a processor (46) other than the CPU. The signature is transmitted to the remote computer and is decrypted at the remote computer in order to authenticate the data.

Abstract: Decryption apparatus includes an input memory (48), which is coupled to receive encrypted data, and an output transducer (28), for presenting decrypted data to a user. A decryption processor (50) is coupled to read and decrypt the encrypted data from the input memory but is incapable of writing to the input memory, and is coupled to convey the decrypted data to the output transducer for presentation to the user.