Configurable Unidirectional Data Transfer System for Secure Network Interconnection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The integration of multi-level gateways for sensitive information transfer is complex and costly, requiring a system that can simplify the design and integration of networks with different sensitivity levels while preventing data leaks during information transfer.

Innovation Solution

A configurable electronic data transfer system comprising electronic data processing modules and unidirectional data transfer links, with controllable components that can be activated or blocked to define data transfer paths, allowing bidirectional or unidirectional data flow between networks, and featuring a matrix arrangement of modules with dedicated integrated circuits or programmable logic components.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional multi-level gateway systems are used to transfer sensitive information between networks of different sensitivity levels, then data security is improved, but device complexity and integration cost increase

Engineering Contradiction:
Improvedata securityVSAvoidintegration complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system segments data transfer into multiple unidirectional paths, with each path containing diode-type components that enforce one-way data flow. This segmentation prevents feedback loops and ensures data moves only from higher to lower sensitivity levels, maintaining security while simplifying the overall gateway architecture.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

Diode-type equipment acts as an intermediary component between networks of different sensitivity levels. These components physically enforce unidirectional data flow, preventing direct bidirectional communication and eliminating the need for complex security protocols and monitoring systems.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If traditional multi-level gateway systems are used to prevent data leaks, then data security is improved, but cost increases

Engineering Contradiction:
Improvedata securityVSAvoidintegration cost
Core Design Contradiction:
ReliabilityVSEase of manufacture

Solution Approach 1:

The system uses simple diode-type components that are inexpensive to manufacture and replace. These components provide reliable unidirectional data flow without requiring expensive security infrastructure, making the overall system more cost-effective while maintaining data security.

Inventive Principle:
Principle #27Cheap short-living objects (Disposable)

3Reliability

If fixed gateway configurations are used to ensure data security, then reliability is improved, but adaptability decreases

Engineering Contradiction:
Improvedata securityVSAvoidreconfiguration capability
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The gateway system allows dynamic reconfiguration of unidirectional data paths by activating or deactivating specific diode-type components. This enables the system to adapt to different security requirements and data flow patterns while maintaining the fundamental unidirectional security model, providing both reliability and flexibility.

Inventive Principle:
Principle #15Dynamics

Data Source

PatentEP3040873B1Configurable electronic system of transfer of data and associated configuration method
Publication Date: 2019.09.11 THALES SA
  • EP3040873B1 patent drawingFigure 1~2
  • EP3040873B1 patent drawingFigure 3
  • EP3040873B1 patent drawingFigure 4

AI summary

The invention relates to an electronic system (10) comprising at least one electronic data processing module (14), and a plurality of pairs of unidirectional data transfer links (18), each unidirectional link (18) having at least one controllable unidirectional component (20) between an enabled data transfer configuration and a disabled data blocking configuration. Each respective pair of unidirectional links (18) is connected to at least one electronic module (14) and comprises two unidirectional links (18) arranged in opposite directions.