Cross-Domain Document-Based Collaboration in a Multi-Level-Secure Environment

Galois proposes to develop a trusted document server (DocServer) to mediate the connection between a user's workstation and files to which they have access. Users will connect to a single "virtual" combined file and web server from which they may browse, open, edit and save documents, using COTS editors (like Word 2003). The DocServer will allow XML documents stored on the file/web server to contain regions marked with varying sensitivity level annotations. The DocServer will provide a secure execution environment and safe access to multi-level document storage, and will mediate between user workstations and the multi-level document storage, ensuring that multiple users can collaborate safely and securely on documents with information annotated to multiple levels of security. The DocServer will also support a restricted form of XSLT, for imposing clearance-level specific views upon documents. The DocServer will be built within the Trusted Services Engine (TSE) platform, a GOTS open source cross-domain file/web server currently under development for the US Navy. The TSE is based around the MILS architectural concept and targets EAL6 evaluation. As the TSE is compatible with the GIG roadmap, the DocServer will be capable of smooth transition from multiple separate networks to a Black Core network.