Abstract: Storage apparatus (20) includes a memory (30) and an encryption processor (28), which is configured to receive and encrypt data transmitted from one or more computers (24) for storage in the memory. A one-way link (32) couples the encryption processor to the memory so as to enable the encryption processor to write the encrypted data to the memory but not to read from the memory.

Abstract: A method for communication includes coupling an information protection device (34) to communicate via a local interface (36) with a local computer (28) operated by a user (22), the information protection device having an input transducer (58) associated therewith. A communication session is initiated between the local computer and a remote computer (24) over a network (26). The information protection device receives an access code input by the user via the input transducer and encrypts the access code using an encryption key held by the information protection device. The encrypted access code is conveyed from the information protection device over the local interface to the local computer and from the local computer to the remote computer over the network in order to authenticate the user at the remote.

Abstract: A method for storing data includes encrypting a first file (30) so as to generate a block (32) of encrypted data. The block of the encrypted data is inserted into a second file (34) containing data having a random distribution. The second file, including the block of the encrypted data, is stored in a storage medium (24).

Abstract: A method for securing data includes encrypting the data and storing a key (54) for deciphering the encrypted data in a volatile memory (56) coupled to a power source (62). In response to an event indicative of a vulnerability of the data to unauthorized exposure, the power source is disconnected from the volatile memory.

Abstract: A method for monitoring a process includes receiving a signal from a sensor that is indicative of a physical attribute associated with the process and transmitting data indicative of the received signal over a one-way link. The transmitted data received from the one way link are used in monitoring the process.

Abstract: A method for secure communications between a transmitting computer (24) and a receiving computer (22) includes transmitting data from the transmitting computer over a first one-way link (28) to a data security engine (26), receiving and validating the data within the data security engine, and, after validating the data, transmitting the data from the data security engine to the receiving computer over a second one-way link (30).

Abstract: A computer-implemented method for protecting a computer network (22) includes receiving at a gateway (24) data transmitted from a source address for delivery to a destination on the computer network. The data are encrypted at the gateway using an encryption key selected from a set of one or more keys that are not available to the source address. The encrypted data are transmitted over the computer network toward the destination. The transmitted encrypted data are received and decrypted for use at the destination by means of one of the keys in the set.

Abstract: A computer input device for operation with a computer includes an input transducer, which is coupled to receive an input from a user and to generate a data signal responsively to the input. An encryption processor is coupled to process the data signal so as to output data to the computer. The encryption processor has a first operational mode in which the encryption processor encrypts the data signal using an encryption key not accessible to the computer so that the data are unintelligible to the computer, and a second operational mode in which the data are intelligible to the computer. A mode switch is operative so as to switch between the first and second operational modes of the encryption processor. An output transducer is coupled to provide to the user an indication of whether the encryption processor is in the first or the second operational mode.

Abstract: The invention provides a method and system for locating an epileptic focus in an individual. In accordance with the method of the invention, an integer N of ictal EEG signals are obtained on the individual and a principal component analysis generating N output signals is executed on the ictal EEG signals. The epileptic focus s then located in a process involving one or more of the N output signals.

Abstract: Sensing apparatus includes a network camera, which is configured to capture images of a scene and to output a sequence of data packets containing digitized video data responsively to the images. A one-way link is coupled to the network camera so as to transmit the data packets from the network camera to a packet communication network.

Abstract: A method for monitoring a process includes receiving a signal from a sensor that is indicative of a physical attribute associated with the process and transmitting data indicative of the received signal over a one-way link. The transmitted data received from the one way link are used in monitoring the process.