Bypass Switching for Encrypted Network Communication Continuity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing information processing systems face challenges in maintaining security and availability when the information processing device is out of order, leading to potential system downtime and reduced functionality.
Innovation Solution
An information processing device with a switching unit that enables a pass-through mode when the main processing unit becomes inoperable, allowing direct communication between terminal devices and the network without the processing unit, while maintaining encryption and decryption functions through separate communication units.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the information processing device uses a single processing unit for encryption and communication control, then security processing is centralized and manageable, but system availability deteriorates when the processing unit fails
Solution Approach 1:
The communication path is segmented into multiple independent routes: a normal communication path through the information processing unit for encrypted communication, and a bypass communication path that directly connects terminal devices to the network when the processing unit fails. This segmentation allows the system to maintain functionality by switching between paths, improving availability without requiring complex redundancy of the processing unit itself.
Solution Approach 2:
A bypass switching unit acts as an intermediary component that can redirect communication flows. When the information processing unit is operational, it mediates all communication for security processing. When it fails, the bypass switching unit becomes the intermediary, directly connecting terminal devices to the network without requiring complex reconfiguration or additional active processing units.
2Reliability
If the system implements encryption and decryption processing through the information processing unit, then security is maintained, but communication continuity is lost when the processing unit is out of order
Solution Approach 1:
The bypass communication path is pre-configured and ready before failure occurs. The bypass switching unit is designed to activate automatically when the information processing unit fails, providing immediate communication continuity. This prior preparation cushions the impact of failure, allowing the system to maintain operational status without security processing during the failure period.
Solution Approach 2:
The communication path configuration is made dynamic through the bypass switching unit, which can adapt its state based on the operational status of the information processing unit. The system transitions from a static single-path architecture to a dynamic multi-path architecture, automatically routing communications through the appropriate path based on real-time system conditions.
3Reliability
If the bypass mode allows direct communication without encryption processing, then availability is improved during failures, but security is compromised
Solution Approach 1:
The bypass mode implements partial security functionality by maintaining communication continuity without full encryption processing. Rather than attempting to provide complete security (excessive action) through failed processing units or risking total system shutdown, the system accepts reduced security (partial action) to ensure critical communication continuity during failure conditions.
Data Source
Figure 1
Figure 2
Figure 3~4
AI summary
An information processing device includes a first communication unit, a second communication unit, an information processing unit, and a switching unit. The first communication unit is configured to communicate with a terminal device. The second communication unit is configured to communicate with a device connected to a network. The information processing unit is configured to encrypt information which is received from the terminal device by the first communication unit and to transmit the encrypted information to the network via the second communication unit, and is configured to decrypt information which is received from the network by the second communication unit and to transmit the decrypted information to the terminal device via the first communication unit. The switching unit is configured to directly connect a communication line between the first communication unit and the terminal device to another communication line between the second communication unit and the network, when the information processing unit comes into an inoperable state including at least electric power supply stop state, and to switch into a pass-through mode in which the terminal device and the network communicate directly with each other without through the information processing unit.