Abstract: A method comprises; receiving original electronic information from a lesser trusted network in a first electrical zone; permitting electronic information to be transferred between the first electrical zone and the second electrical zone in one direction only; verifying the original electronic information for at least one predetermined characteristic within the second electrical zone so as to provide a verifier output status and verified electronic information; forwarding the verified electronic information to a third electrical zone. The original electronic information at the first electrical zone is received by the third electrical zone via the second electrical zone as verified electronic information in either a transformed state or an untransformed state. The transformed state or the untransformed state is selected dependent upon the verifier output status. The method further comprising creating an electronic key and providing the verified electronic information in dependence upon the electronic key.

Abstract: A method and apparatus of payload assurance for a payload which is to be transferred across a network boundary via any of multiple predetermined boundary control devices, which may be grouped together, each having dedi¬cated permanent identity information. A first electronic entity provides an elec¬tronic authorisation token for defining properties of the payload, and an ephemeral ID array is determined in dependence upon the permanent identity information of each of the boundary control devices in the boundary control group and the authorisation token. An electronic release token is generated in dependence upon the ephemeral ID array and the authorisation token, to be forwarded to a second electronic entity, the release token being valid for use with the boundary control devices provided in the defined boundary control group.

Abstract: A method and device (1) for transferring electronic information between a lesser trusted network (7) and a trusted network (8) is disclosed. The method comprises the steps of: receiving original electronic information from a lesser trusted network (7) in a first electrical zone (2); permitting the original electronic information to be transferred between the first electrical zone (2) and the second electrical zone (4) in one direction only; verifying the original electronic information for at least one predetermined characteristic within the second electrical zone (4) so as to provide a verifier output status and verified electronic information; forwarding the verified electronic information to a third electrical zone (3).

Abstract: A payload assurance system and method for a payload having a header which is to be transferred across a network boundary via at least one predetermined boundary control device. The system comprises at least one computer processor and at least one data storage device, arranged to provide an electronic authorisation token for authorising properties of the payload to be transferred, which electronic authorisation token comprsises at least one entropy element for ensuring that multiple electronic authorisation tokens authorising the same payload properties are unique. A boundary transfer assessment step may be provided at the network boundary, for indirectly determining whether the payload possesses the Authorisation token, using the payload header.

Abstract: A method and apparatus of payload assurance for a payload which is to be transferred across a network boundary via any of multiple predetermined boundary control devices, which may be grouped together, each having dedi¬cated permanent identity information. A first electronic entity provides an elec¬tronic authorisation token for defining properties of the payload, and an ephemeral ID array is determined in dependence upon the permanent identity information of each of the boundary control devices in the boundary control group and the authorisation token. An electronic release token is generated in dependence upon the ephemeral ID array and the authorisation token, to be forwarded to a second electronic entity, the release token being valid for use with the boundary control devices provided in the defined boundary control group.

Abstract: There is described a device and method of removing unwanted data from original data for prohibiting unwanted data transfer between a first device and a second device along a communication pathway. The communication pathway includes at least one data channel and at least one control channel. The method includes providing programmable hardware at a position along the at least one control channel. Original data applied to the device includes control data and associated protocol data, the control data including wanted and unwanted data. The control data is checked to determine whether the associated protocol data conforms to at least one predetermined protocol mode criteria at the programmable hardware. The programmable hardware is terminated where the control data is deemed to be unwanted data. The resulting data which is left over is substantially free of unwanted data, enabling associated protocol data transmission along the data channel.

Abstract: A method and device (1) for transferring electronic information between a lesser trusted network (7) and a trusted network (8) is disclosed. The method comprises the steps of: receiving original electronic information from a lesser trusted network (7) in a first electrical zone (2); permitting electronic information to be transferred between the first electrical zone (2) and the second electrical zone (4) in one direction only; verifying the original electronic information for at least one predetermined characteristic within the second electrical zone (4) so as to provide a verifier output status and verified electronic information; forwarding the verified electronic information to a third electrical zone (3).

Abstract: A method and device (1) for transferring electronic information between a lesser trusted network (7) and a trusted network (8) is disclosed. The method comprises the steps of: receiving original electronic information from a lesser trusted network (7) in a first electrical zone (2); permitting the original electronic information to be transferred between the first electrical zone (2) and the second electrical zone (4) in one direction only; verifying the original electronic information for at least one predetermined characteristic within the second electrical zone (4) so as to provide a verifier output status and verified electronic information; forwarding the verified electronic information to a third electrical zone (3).

Abstract: In the field of data filtering the invention discloses a method of filtering data and a data filter (1), both with optional features, which assess network data using a number of criteria to refine it to a format appropriate for a user.

Abstract: There is described a method (1b) of removing unwanted data from original data (8) for prohibiting unwanted data transfer between a first device (2) and a second device (3) along a communication pathway (4) located therebetween. The communication pathway (4) comprises at least one data channel (5a, 5b, 5c) and at least one control channel (6). The method comprises providing a negotiation means (7) at a position along the at least one control channel (6). Original data (8) applied to the device comprises control data (9) and associated protocol data (10), the control data (9) comprising wanted and unwanted data. The control data (9) is checked to determine whether the associated protocol data (10) conforms to at least one predetermined protocol mode criteria at the negotiation means. The negotiation means (7) is terminated where the control data is deemed to be unwanted data.

Abstract: In the field of data filtering the invention discloses a method of filtering data and a data filter (1), both with optional features, which assess network data using a number of criteria to refine it to a format appropriate for a user.