System device for secure data migration with integrity check and transmission control

Abstract

System device for secure data migration, comprising at least one processing unit, a data interface for coupling between a source environment and a target environment, a transmission control unit, and an integrity check unit, wherein the system device is configured to transfer data between the source environment and the target environment, characterized in that that the transmission control unit, at the hardware or firmware level, enables, restricts or interrupts the data transmission, and the integrity check unit performs a technical integrity verification of the transmitted data.

Description

Technical field

[0001] The invention relates to the technical field of data transmission and data migration in information technology systems. In particular, the invention relates to a system device for the controlled migration of data between different IT environments while simultaneously performing a technical integrity check of the transferred data. State of the art

[0002] Modern IT infrastructures often require the migration of data between different source and target environments, such as local server systems, data centers, virtualized environments, or cloud systems. Most well-known data migration solutions rely on application-side software tools that copy or synchronize data.

[0003] However, such well-known solutions have significant drawbacks. In particular, data transfer often occurs without system-level technical control, meaning that transfers can be incomplete, faulty, or manipulated. Integrity checks are frequently only performed after the migration is complete or depend on application software that is itself part of the source or target environment.

[0004] Furthermore, the current state of the art lacks a clear separation between transmission control and integrity verification at the system level, which limits the security and traceability of data migrations. Object of the invention

[0005] The object of the present invention is to provide a system device which: • enables technically controlled data migration between a source environment and a target environment, • enables, restricts or interrupts data transmission on the system side, • the integrity of the transmitted data is technically verified, • works independently of the application software of the environments involved, and • provides traceable and tamper-proof logging of data transmission. Summary of the invention

[0006] The present invention provides a system device for secure data migration, comprising a processing unit, a data interface for coupling the system with a source environment and a target environment, a transfer control unit and an integrity check unit.

[0007] The transmission control unit is implemented in hardware or firmware and configured to selectively allow, restrict, or interrupt data transmission between the source and destination environments. The integrity check unit performs a technical integrity verification of the transmitted data to detect transmission errors or unauthorized modifications.

[0008] In certain embodiments, data transmission is divided into several logically or physically separate transmission segments, with each transmission segment being monitored independently. The system device operates at the system level independently of application software running within the source or destination environment.

[0009] The system device also includes a tamper-proof logging unit that stores status information on released, restricted, interrupted or verified data transmissions, thereby enabling secure and traceable data migration. Detailed description of the invention

[0010] The system device according to the invention comprises at least one processing unit configured to coordinate data migration. The system device is coupled via a data interface to a source environment and a target environment between which data is to be transferred.

[0011] A transmission control unit (TCU) is operationally linked to the processing unit (PCU) and controls data transmission at the system level. The TCU is implemented in hardware or firmware and can enable, restrict, or interrupt data transmission. This prevents data from being migrated uncontrollably or outside of defined system states.

[0012] An integrity check unit performs a technical integrity verification of the transmitted data. In a preferred embodiment, the integrity check unit compares data states of the source environment with data states of the target environment to detect transmission errors or manipulations.

[0013] In another embodiment, the data transmission is divided into several logically or physically separate transmission segments. Each transmission segment is monitored separately, enabling fine-grained control and fault localization.

[0014] The transfer control unit and the integrity check unit are designed as separate system modules and operate independently of application software in the source or target environment. This results in increased security and robustness of the data migration.

[0015] Optionally, a logging unit is provided that stores tamper-proof status information about released, interrupted, or verified data transfers. This enables subsequent analysis and auditing of the data migration.