Communication Intermediary for Secure Data Retrieval from Isolated Test Systems

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Non-networked test systems, such as diagnostic analyzers, are vulnerable to malicious code and lack efficient data retrieval and monitoring capabilities due to their isolation from external networks, which hinders system updates and data transmission, and requires physical presence for maintenance.

Innovation Solution

A system with a communication intermediary, comprising a single board computer with dual network interfaces, isolates the non-networked test system from the external network, allowing secure data transfer to an external storage system without the need for antivirus software, using a configuration file to manage data file monitoring and transfer.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the test system is isolated from external networks to eliminate vulnerability to malicious code, then security is improved, but data transmission and remote monitoring capabilities are lost

Engineering Contradiction:
ImprovesecurityVSAvoiddata transmission capability
Core Design Contradiction:
ReliabilityVSLoss of information

Solution Approach 1:

A communication intermediary device is introduced between the isolated test system and the external network. This intermediary acts as a mediator that allows data to be transferred from the test system to external storage systems without creating direct network connections to the test system, thus maintaining security while enabling data transmission functionality.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Productivity

If the test system is isolated from external networks to eliminate the need for antivirus software, then system performance is improved, but remote system updates and monitoring are prohibited

Engineering Contradiction:
Improvesystem performanceVSAvoidremote maintenance capability
Core Design Contradiction:
ProductivityVSEase of operation

Solution Approach 1:

The communication intermediary serves as a mediator that enables remote monitoring and control of the test system without requiring direct network access to the test system itself. The intermediary handles communication protocols and data transfer, allowing administrators to monitor system status and receive alerts remotely while the test system remains isolated and secure.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Reliability

If the test system is isolated from external networks to eliminate network connection requirements, then vulnerability to malicious code is eliminated, but physical presence is required for all maintenance operations

Engineering Contradiction:
ImprovesecurityVSAvoidmaintenance time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The communication intermediary enables remote monitoring and control capabilities, allowing maintenance personnel to monitor system status, receive alerts, and perform diagnostics remotely without needing to be physically present at the test system location. This significantly reduces maintenance time and travel requirements while maintaining the security benefits of network isolation.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS12003347B2System and method for retrieving data from a non-networked, remotely-located data generating device
Publication Date: 2024.06.04 IDEXX LABORATORIES INC
  • US12003347B2 patent drawing
  • US12003347B2 patent drawing
  • US12003347B2 patent drawing

AI summary

A system and method for retrieving data from a data generating device includes a communication intermediary and an external data storage system. The communication intermediary has a first network interface that is connected to the external data storage system and a second network interface that is connected to the data generating device. The communication intermediary isolates the network communication between the data generating device and second network interface from the network communication between the external storage system and the first network interface, and thereby isolates the data generating device from the external storage system. The communication intermediary monitors the data generating device for newly generated data files, copies the newly generated data files to an internal memory and sends the data files to the external storage system.