Data connection

Abstract

The invention relates to data connection comprising a first connector and a second connector the first connector comprises, a first holding frame, a first base module, a first compute module connected to the first base module, at least one first communication module connected to the first base module, and a fist holding frame, wherein the first base module, the first compute module and the at least one first communication module are arranged in the first holding frame, wherein the at least one first communication module comprises a first communication interface, wherein the first communication interface is configured as a sender or as receiver of a data diode to transmit or receive data. The second connector comprises a second holding frame, a second base module, a second compute module connected to the second base module, at least one second communication module connected to the second base module, and a second holding frame, wherein the second base module, the second compute module and the at least one second communication module are arranged in the second holding frame (121). The at least one second communication module comprises a second interface, wherein the second communication interface is configured as a receiver or a sender of the data diode to receive or transmit data. The first communication interface and the second communication interface are configured to enable a data stream between the first connector and the second connector.

Description

[0001] Data connection

[0002] Description:

[0003] The invention relates to a Data connection.

[0004] In data industrial networks, it is often necessary to protect certain network nodes or even whole subnets against or devices unauthorized access. In addition to so-called firewalls, which check incoming data for possible malware, the use of data diodes can also be considered. With these elements a data stream in only one direction can be enabled.

[0005] The data diode is a network security device that allows strictly unidirectional data traffic. This is advantageous in situations where the strictest security measures are required, as it prevents information from returning to the source, thus minimizing the risk of data leaks or cyber-attacks.

[0006] The data diode is located at the interface between two networks and / or serves to prevent the stream of data (in particular sensitive data) from a first network to a second. A data diode ensures that only data from the first network can be transmitted to the second network, while attempts to establish connections from the first network to the second network are blocked by the data diode.

[0007] A possible application of the data diodes is the use in a sensor arrangement where a back channel from the controller to the sensor shall be prevented. This allows sensor signals to be read from the sensor, but no commands to be sent from the controller to the sensor. From WO 2023 / 280344 A1 a plug connector housing with a data diode is known. The application discloses a two-piece connector having an attachment housing and a plug connector housing. The electronic for the data diode is included into the plug connector housing. The attachment housing comprises no electronic.

[0008] The invention solves the problem to integrate a data diode into a two part Han-modular connector, to provide a high flexibility of the interfaces and an almost configuration-free installation to realize a Test Access Point (TAP) functionality as well as media conversion functionality for different type of network interfaces.

[0009] According to the invention, this is achieved by a connector with data connection according to claim 1 and a system with a grommet housing and an addon housing according to claim 14. Advantageous embodiments can be taken from the sub-claims, for example. The content of the claims is made the content of the description by express inclusion.

[0010] The invention provides a data connection comprising a first connector and a second connector. The first connector comprises a first base module, a first compute module connected to the first base module, at least one first communication module connected to the first base module, and a fist holding frame. The first base module, the first compute module and the at least one first communication module are arranged in the first holding frame, wherein the at least one first communication module comprises a first communication interface. The first communication interface is configured as a sender or as receiver of a data diode to transmit or receive data.

[0011] The second connector comprises a second base module, a second compute module connected to the second base module, at least one second communication module connected to the second base module, and a second holding frame. The second base module, the second compute module and the at least one second communication module are arranged in the second holding frame. The at least one second communication module comprises a second interface. The second interface is configured as a receiver or a sender of the data diode to receive or transmit data.

[0012] The first communication interface and the second communication interface are configured to enable a data stream between the first connector and the second connector. The first communication interface and the second communication interface can be configured to enable a bidirectional communication.

[0013] The first and / or the second compute module can be configured to process the data stream between the first connector and the second connector. The first and / or the second compute module can be configured to encrypt and / or decrypt the data stream or process the data stream to a standard like Ethernet or any different cable bounded standard.

[0014] In another embodiment the first connector can attached to a grommet housing and the second connector can be attached to an add-on housing.

[0015] The grommet housing is the part of the plug connections that holds a grommet in place. The grommet is the part that provides a protective seal around a cable or a wire that are passing through the plug connection. This helps to prevent any damage to the wires or first connector stored in the grommet housing. The grommet housing is the moveable part of the plug connection.

[0016] The add-on housing of the plug connection is a fixed housing to a surface the plug connection shall be attached to. The plug connection can be configured, to add extra features like waterproofing or dust resistance, or to adapt the plug for use with different types of sockets or devices. The add-on housing can be configured to be easily attached and detached, allowing for flexibility and customization based on the specific needs of the user or the environment in which the plug is being used. The add-on housing prevents damage from the second connector when attached to the add-on housing.

[0017] In another preferred embodiment the transmission direction of data of the at least one first communication interface and the transmission direction of data of the at least one second communication interface is adaptable, so that only one direction of data communication from the at least one first communication module to the at least one second communication module or from the at least one second communication module to the at least one first communication module is enabled. In other words the direction the transmission direction of the data via the data diode can be adapted. The data diode can be realized from respectively between the at least one first communication interface of the at least one first communication module and the at least one second interface of the at least one second communication module.

[0018] In another embodiment the first connector comprises two first communication interfaces and the second connector comprises two second communication interface. A first one of the two first communication interfaces and a first one of the two second communication interfaces are configured to transmit data from the first connector to the second connector, and a second one of the two first communication interfaces and a second one of the two second communication interfaces are con-figured to transmit data from the second connector to the first connector. Therefore, a bidirectional communication can be enabled. A communication can only be enabled if the first connector of the plug connection and the second connector of the plug connection are engaged. In these configuration two data diodes with different respectively opposing directions of data transmission can be provided.

[0019] For the aforementioned bidirectional communications two data diodes can be used between the first connector and the second connector. Therefore, two first communication interfaces and two second communication interfaces can be used. The communication interfaces are coupled pairwise the first one of the first communication interfaces to the first one of the second communication interfaces and / or the second one of the first communication interfaces to the second of the second communication interfaces.

[0020] In another preferred embodiment the first communication interface and the second communication interface comprises at least one of the combinations of, a laser diode and / or photodiode, a transmitter optical sub assembly (TOSA) and / or a receiver optical sub assembly (ROSA), an optocoupler combination, or a direct electrical connection of respectively between the first communication interface and the second communication interface.

[0021] The Transmitter Optical Sub Assembly (TOSA) can be a key component in fiber optic communication systems. It can comprises at least one of the following a laser diode, an optical interface, and an electronic circuitry. The TOSA can be configured to convert electrical signals into optical signals. The laser diode can generates the light, and the optical interface can focus the light into an optical fiber. TOSAs can be used in conjunction with Receiver Optical Sub-Assemblies (ROSA), which convert the optical signals back into electrical signals.

[0022] In another embodiment a hard diode is implemented by each combination of the first communication interface and the second communication interface.

[0023] In the context of secure data transmission, the hard diodes, also known as a data diode or unidirectional network, is configured to provide an one-way communication link. This ensures that data can only be transferred in one direction, from a source to a destination, without any possibility of data or signals being sent back the other way.

[0024] This can be important in high-security environments where it is critical to prevent any potential for data leakage or unauthorized access. By physically enforcing a one-way stream of data, a hard diode in a plug connection can provide a high level of security for data transmission.

[0025] For example, it can be used to protect sensitive information on a network, to securely transfer data between different security domains, or to provide a secure gateway for data feeds from external networks.

[0026] In another embodiment the first compute module is detachably connected to the first base module with at least one board-to-board connector and the at least one first communication module is detachably connected to the first base module with at least one board-to-board connector, the second compute module is detachably connected to the second base module with at least one board-to-board connector and the at least one second communication module is detachably connected to the second base module with at least one board-to-board connector.

[0027] The at least one board-to-board connector is used to link or connect the different modules within the plug connection. The board-to-board connector can be realized as at least one of the following types:

[0028] A Single or Dual Row Connectors comprising of one or two rows of connectors. They are used in a variety of applications and are available in different pitches (distance between pins). Single or Dual Row Connectors can comprise a series of pins and sockets arranged in either a single or double row format.

[0029] A Mezzanine Connector can be used to connect parallel boards together. They are configured to stack one board on top of another. The position can be at a right angle. They can be used in applications where space is limited.

[0030] A Micro Connectors. These are smaller connectors used in compact or portable devices. They are designed to provide reliable connections in a small form factor. Micro connectors can be made from high-conductivity metals like copper or gold for the contacts, and plastic or other insulating materials for the housing. Due to the small size, advanced manufacturing techniques such as micro-molding or precision machining can be used.

[0031] A Coaxial or RF Connectors can be used for transmitting radio frequency signals between boards. The Coaxial or RF connector is configured to maintain the coaxial form factor of the cables it connects. This ensures that the signal's integrity is maintained throughout the connection. The Coaxial or RF connector comprise the following parts: An inner Conductor (Pin). This is the central part of the Coaxial or RF connector that carries the RF signal. It can be made of a highly conductive material like gold or silver-plated brass or copper.

[0032] An insulator surrounding the inner conductor. The insulator is often made from a material like Teflon. This insulator is configured to maintain the spacing between the inner conductor and the outer shield, which is crucial for maintaining the connector's characteristic impedance.

[0033] An outer conductor (Shield), which is the outer part of the connector that surrounds the insulator. It can be made of a conductive material and serves to shield the RF signal traveling through the inner conductor from external electromagnetic interference.

[0034] A housing or body which is the outermost part of the connector that can provide mechanical strength. It also can include a coupling mechanism that allows the connector to be attached and detached from the modules it is connecting with. The housing can be made from various materials, including metals like brass or stainless steel, and may be plated with materials like nickel or gold for additional durability and corrosion resistance.

[0035] The coaxial RF connectors can have a ferrule, which is used to secure the connector.

[0036] A coupling nut is a component of the housing that allows the connector to be attached to a mating connector or device. The coupling nut can be designed with various mechanisms, including threaded, bayonet, or push-on styles.

[0037] This structure allows the Coaxial or RF Connector to provide a reliable and high-quality connection for RF signals, maintaining the signal's integrity and preventing interference. In another preferred embodiment the first base module and / or the second base module comprises at least one power supply and / or a supplied with power over ethernet.

[0038] The power supply on the base module, also known as an on-board power supply or simply a power supply unit (PSU), is the device that supplies the electrical power to the modules connected to the base module.

[0039] In another embodiment the at least one first communication module and the at least one second communication module are configured to implement at least one Ethernet standard between the first communication interface and the second communication interface. The first compute module and / or the second compute module is configured to process the data stream from the first connector to the second connector.

[0040] In another preferred embodiment the at least one first communication module is configured and / or the at least one second communication module is configured to implement a test access point functionality (TAP), wherein the first connector comprises at least one first network interface and at least one second network interface and / or the second connector comprises at least one first network interface and at least one second network interface. The at least one first network interface and the at least one second network interface of the first connector or the second connector are configured to pass through a data stream from the at least one first network interface to the at least one second network interface and are configured to transmit a copy of at least one part of the data stream to the at least one first communication module or the at least one second communication module, the at least one first communication module is configured to transmit the at least one part of the data stream to the at least one second communication module or the at least one second communication module is configured to transmit the at least one part of the data stream to first at least one communication module.

[0041] In another embodiment the test access point functionality enables a configuration less installation or implementation in a secure network of the first connector and the second connector by passing through a data stream from the at least one first network interface to the at least one second network interface of the first connector or the second connector by interposing in a data connection the at least one first network interface and the at least one second network interface of the first connector and / or the second connector.

[0042] Interposing means that a data connection respectively a data stream is interrupted an the first connector or the second connector is inserted. This means that the data connection is connected to the first network interface of the second connector or the second network interface of the second connector.

[0043] In another preferred embodiment the at least one first network interface and the at least one second network interface of the first connector is an Ethernet interface and / or a SPE interface and / or ix interface and / or a fiber interface and the first network interface and the second network interface of the second connector is an Ethernet interface and / or a SPE interface and / or ix interface and / or a fiber interface for enabling media conversion between the first connector and the second connector by transmitting data from the first connector to the second connector via the first communication interface and the second communication interface. Afterwards the data connection respectively the data stream over the data connection can be reestablished. Preferably the reestablishment of the data stream works automatically without manual configuration. The wording interface means that a plug or a socket can be apparent to a attack an mating plug or socket for a data connection to the first connector or the second connector. The first connector can have several interfaces of the same type and the second connector can have several interfaces of the same type.

[0044] The Single Pair Ethernet (SPE) interface is a technology that enables the connection of devices using only one pair of wires, instead of the traditional four pairs required for Ethernet connectivity. This technology is gaining traction due to its simplicity, cost-effectiveness, and energy efficiency. The IX Interface (IX) is a new standard for connecting devices in an industrial setting. It is designed to provide a more efficient, flexible, and rugged alternative to traditional fieldbus systems, and to support the increasing demand for real-time communication and data exchange in Industry 4.0 applications.

[0045] The fiber interface refers to a type of physical connection or link between two devices or systems that enables them to transmit data through optical fibers. Optical fibers are thin strands of glass or plastic that transmit data as light signals, which allows for fast and reliable data transmission over long distances.

[0046] In another embodiment the Test Access Point (TAP) can be a hardware device which provides a way to access data flowing or streaming across a computer network. In other words, it's a monitoring tool used to capture and analyze network traffic. The TAP in the plug connection, also known as an inline TAP, is a device that is physically inserted, or "plugged," into the network line to monitor the traffic. It works by splitting or copying the network data, allowing it to pass through the network unimpeded while simultaneously sending a copy to a monitoring device for analysis.

[0047] In another embodiment the first base module comprises at least one slot for accommodating the at least one first communication module, and the second base module comprises at least one slot for accommodating the at least one second communication module.

[0048] In another preferred embodiment the first base module, the at least one first communication module is inserted in in the at least one slot of the first base module in an exchange-able manner and the at least one second communication module is inserted in in the at least one slot of the second base module in an exchangeable manner.

[0049] In another embodiment the first base module has a slot to attach the first compute module to the first base module and / or the second base module has a slot to attach the second compute module to the first base module. In another preferred embodiment the grommet housing or the add-on housing accommodating the first connector and the add-on housing or the grommet housing accommodating the second connector. The grommet housing and the add-on housing are connectable with a screw connection or a snap connection to establish a data transmission.

[0050] In another embodiment the add-on housing can be attached to a control cabinet or to an electric sub distribution. The grommet housing can be a type of prefabricated housing or module that is designed to fit around electrical plugs or outlets. These modules can be made of lightweight materials such as steel or aluminum frames and are intended to be easy to install and reconfigure as needed and can be attached to the add-on housing.

[0051] In another embodiment the first connector and the second connector can be designed to be received in a first intermediate frame and in a second intermediate frame. For mounting in the intermediate frames, the first connector and the second connector can comprise at least one retaining means that engage at least one recesses in the intermediate frames.

[0052] In another preferred embodiment the first intermediate frame can be used to attach the first connector to the add-on housing or the grommet housing or a second intermediate frame to attach the second connector to the add-on housing or the grommet housing. The first intermediate frame for the first connector and / or the second intermediate frame second connector can be configured as a one piece intermediate frame or as a divisible intermediate frame. The divisible intermediate frame can comprise a first half shell and a second half shell. The divisible first intermediate frame and / or second intermediate frame can comprise at least one screw connection for connecting the first half shell and the second half shell.

[0053] The first intermediate frame for the first connector or the second intermediate frame for the second connector further comprises screw connections for attaching the first intermediate frame to the grommet housing and the second intermediate frame to the add-on housing. The invention is described below by way of example only, with reference to the drawings. It shows:

[0054] - Figure 1 a data connection according to an embodiment of the invention in a sectional view; and

[0055] Figure 2 a data connection according to an embodiment of the invention; and

[0056] - Figure 3 a data connection with an add-on housing and a grommet housing according to an embodiment of the invention.

[0057] The invention is not limited to the described embodiments. Within the scope of the invention, all described and / or drawn features can be combined with each other as desired, unless otherwise indicated.

[0058] Figure 1 discloses a data connection comprising, a first connector 110 and a second connector 120. The first connector 110 comprises, a first holding frame 111 , a first base module 112, a first compute module 113 connected to the first base module 112, at least one first communication module 114 connected to the first base module 112 The first base module 112, the first compute module 113 and the at least one first communication module 114 are arranged in the first holding frame 111 , wherein the at least one first communication module 114 comprises a first communication interface 115, wherein the first communication interface 115 is configured as a sender or as receiver of a data diode 116 to transmit or receive data.

[0059] The second connector 120 comprises a second holding frame 121 , a second base module 122, a second compute module 123 connected to the second base module 122, at least one second communication module 124 connected to the second base module 122, and a second holding frame 121. The second base module 122, the second compute module 123 and the at least one second communication module 124 are arranged in the second holding frame 121 , wherein the at least one second communication module 124 comprises a second communication interface 125, wherein the second communication interface 125 is configured as a receiver or a sender of the data diode 126 to receive or transmit data.

[0060] The transmission direction of data of the at least one first communication interface 115 and the transmission direction of data of the at least one second communication interface 125 is adaptable, so that only one direction of data communication from the at least first communication module 114 to the at least one second communication module 124 or from the at least one second communication module 124 to the at least one first communication module 114 is enabled.

[0061] Figure 2 discloses the first at least one communication module 114 and the at least one second communication module 124 is configured to implement a test access point functionality (TAP), therefore the first connector 110 comprises a first network interface and a second network interface or the second connector 120 comprises a first network interface and a second network interface, wherein the first network interface and the second network interface are configured to pass through a data stream from the first network interface to the second network interface and transmit a copy of a part of the data stream or the whole from the at least one first communication module 114 to the at least one second communication module 124 or from the at least one second communication module 124 to at least one first communication module 114.

[0062] Figure 3 discloses a data connection 100 with a first connector 110 and a second connector 120. The first connector 110 is located in a grommet housing 200 and the second connector 120 is located in an add-on housing 300.

[0063] For attaching the first connector 110 to the grommet housing 200 and the second connector 120 to the add-housing 300 an first intermediate frame 210 and a second intermediate frame 310 is used. The first intermediate frame 210 for the first connector 110 or the second intermediate frame 310 for the second connector 120 is configured as a divisible intermediate frame 210, 310. The divisible intermediate frames 210,310 comprises a first half shell and a second half shell. The divisible intermediate frames 210, 310 comprise two screw connection for connecting the first half shell and the second half shell of the intermediate frame. The first intermediate frame 210 for the first connector 110 or the second intermediate frame 310 for the second con- nector 120 further comprises screw connections for attaching the first intermediate frame 210 to the grommet housing 200 and the second intermediate frame 310 to the add-on housing.

[0064] Reference signs

[0065] Data connection 100

[0066] First connector 110

[0067] First holding frame 111

[0068] First base module 112

[0069] First compute module 113

[0070] First communication module 114

[0071] First communication interface 115

[0072] Data diode 116

[0073] First network interface 117

[0074] Second network interface 118

[0075] Second connector 120

[0076] Second holding frame 121

[0077] Second base module 122

[0078] Second compute module 123

[0079] Second communication module 124

[0080] Second communication interface 125

[0081] Grommet housing 200

[0082] First intermediate frame 210

[0083] Add-on housing 300

[0084] Second intermediate frame 310

Claims

Claims:1 . A data connection (100), comprising, a first connector (110) and a second connector (120), wherein, the first connector (110) comprises, a first holding frame (111 ), a first base module (112), a first compute module (113) connected to the first base module (112), at least one first communication module (114) connected to the first base module (112), and a fist holding frame (111), wherein the first base module (112), the first compute module (113) and the at least one first communication module (114) are arranged in the first holding frame (111), wherein the at least one first communication module (114) comprises a first communication interface (115), wherein the first communication interface (115) is configured as a sender or as receiver of a data diode (116) to transmit or receive data, wherein the second connector (120) comprises a second holding frame (121), a second base module (122), a second compute module (123) connected to the second base module (122), at least one second communication module (124) connected to the second base module (122), and a second holding frame (121 ), wherein the second base module (122), the second compute module (123) and the at least one second communication module (124) are arranged in the second holding frame (121), wherein the at least one second communication module (124) comprises a second interface (125), wherein the second communication interface (125) is configured as a receiver or a sender of the data diode (126) to receive or transmit data, wherein the first communication interface (115) and the second communication interface (125) are configured to enable a data stream between the first connector (110) and the second connector (120).

2. The data connection (100), according to any one of the preceding claims, wherein the transmission direction of data of the at least one first communication interface (115) and the transmission direction of data of the at least one second communication interface (125) is adaptable, so that only one direction of data communication from the at least first communication module (114) to the at least one second communication module (124) or from the at least one second communication module (124) to the at least one first communication module (114) is enabled.

3. The data connection (100), according to any one of the preceding claims, wherein the first connector (110) comprises two first communication interfaces (115) and the second connector (120) comprises two second communication interface (125), wherein a first one of the two first communication interfaces (115) and a first one of the two second communication interfaces (115) are configured to transmit data from the first connector (110) to the second connector (120), and a second one of the two first communication interfaces (115) and a second one of the two second communication interfaces (125) are configured to transmit data from the second connector (120) to the first connector (110).

4. The data connection (100), according to any one of the preceding claims, wherein the first communication interface (115) and the second communication interface (125) comprises at least one of the combinations of, a laser diode and / or photodiode, a transmitter optical sub assembly and / or a receiver optical sub assembly, an optocoupler combination, or a direct electrical connection of the firstcommunication interface (115) and the second communication interface (125).

5. The data connection (100), according to any one of the preceding claims, wherein a hard diode is implemented by each combination of the first communication interface (115) and the second communication interface (125).

6. The data connection (100), according to any one of the preceding claims, wherein the first base module (112) and / or the second base module (122) comprises at least one power supply and / or a supplied with power over ethernet.

7. The data connection (100), according to any one of the preceding claims, whereinThe at least one first communication module (114) and the at least one second communication module (124) are configured to implement at least one Ethernet standard between the at least one first communication interface (115) and the at least one second communication interface (125).

8. The data connection (100), according to any one of the preceding claims, wherein the at least one first communication module (114) is configured and / or the at least one second communication module (124) is configured to implement a test access point functionality, wherein the first connector (110) comprises at least one first network interface (117) and at least one second network (118) interface and / or the second connector (120) comprises at least one first network interface (117) and at least one second network interface (118), whereinthe at least one first network interface (117) and the at least one second network interface (118) of the first connector (110) or the second connector (120) are configured to pass through a data stream from the at least one first network interface (117) to the at least one second network interface (118) and are configured to transmit a copy of at least one part of the data stream to the at least one first communication module (114) or the at least one second communication module (124), the at least one first communication module (114) is configured to transmit the at least one part of the data stream to the at least one second communication module (124) or the at least one second communication module (124) is configured to transmit the at least one part of the data stream to first at least one communication module (114).

9. The data connection (100), according to claim 8, wherein the test access point functionality enables a configuration less implementation in a secure network of the first connector (110) and the second connector (120) by passing through a data stream from the at least one first network interface (117) to the at least one second network interface (118) by interposing in a data connection the at least one first network interface (117) and the at least one second network interface (118) of the first connector (110) and / or the second connector (120).

10. The data connection (100), according to claim 8 or 9, wherein the at least one first network interface (117) and the at least one second network interface (118) of the first connector (110) is an Ethernet interface and / or a SPE interface and / or ix interface and / or a fiber interface and the first network interface (117) and the second network interface (118) of the second connector (120) is an Ethernet interface and / or a SPE interface and / or ix interface and / or a fiber interface forenabling a media conversion between the first connector (110) and the second connector (120) by transmitting data from the first connector (110) to the second connector (120) via the first communication interface (115) and the second communication interface (125).

11. The data connection (100), according to any one of the preceding claims, wherein the first compute module (113) is detachably connected to the first base module (112) with at least one board-to-board connector and the at least one first communication module (114) is detachably connected to the first base module (112) with at least one board- to-board connector, the second compute module (123) is detachably connected to the second base module (122) with at least one board-to-board connector and the at least one second communication module (124) is detachably connected to the second base module (122) with at least one board-to-board connector.

12. The data connection (100), according to any one of the preceding claims, wherein the first base module (112) comprises at least one slot for accommodating the at least one first communication module (114), and the second base module (122) comprises at least one slot for accommodating the at least one second communication module (124).

13. The data connection (100), according to any one of the preceding claims, wherein the at least one first communication module (114) is inserted in the at least one slot of the first base module (122) in an exchangeable manner andthe at least one second communication module (124) is inserted in in the at least one slot of the second base module (122) in an exchangeable manner.

14. System with a data connection (100), according to one of the previous claims, wherein the grommet housing (200) or the add-on housing (300) accommodating the first connector (110) and the add-on housing (300) or the grommet housing (200) accommodating the second connector (120).

15. System with a data connection (100), according to claim 14, wherein a first intermediate frame (210) is configured to accommodate the first connector (110) in the gromet housing (200) or add-on housing (300) and a second intermediate frame (310) is configured to accommodate the second connector (120) in the add-on housing (300) or grommet housing (200).

Images