METHOD FOR MANAGING DATA MOVEMENT BASED ON HARDWARE CONTROL LOGIC NODE AND SYSTEM FOR IMPLEMENTING THE METHOD Russian patent published in 2024 - IPC G06F21/44 

FIELD: movement of data.

SUBSTANCE: invention relates to a method and system for controlling the movement of data. The method includes external connection of an external terminal security device to a secure host computer, where the terminal protection device is additionally equipped with an interface control module; the hardware control logic node, internal interface, external interface and transmission interface are located on the interface control module; and the transmission interface is connected to the system control module; connecting, by means of a hardware control logic node, the main communication line between the external interface accessing the external device and the transmission interface, and maintaining the main communication line between the transmission interface and other interfaces in a disabled state when the external device needs to transmit data to the secure host computer; moving the transmitted data to the system control module using the transmission interface and maintaining the secure host computer in a data disconnected state; connecting, using a hardware control logic node, the main communication line between the external interface in the terminal protection device and the system control module; performing a security access check on an external device using the system management module and determining whether the external device has access rights; disabling, through hardware control logic node, the primary communication link between the external interface that has access to the external device and other interfaces after the system management module performing a secure access right check on the external device and determining that the external device does not have access right, in order to filter and prohibit data transfer after gaining access to an external device; and/or connecting, via a hardware control logic node, the primary communication link between an external interface having access to an external device and an external interface having access to a secure host computer after the system management module performing a secure access right check on the external device and determining that the external device is a device with access rights to enable communication between the external device and the protected host computer.

EFFECT: increasing the security of access to the computer.

9 cl, 6 dwg