Cross-Network Data Packet Routing for Secure Batch Transmission
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network separation technologies face inefficiencies and security vulnerabilities in data transmission between networks, particularly due to limitations in bidirectional data transmission systems that do not support all OSI layers and can lead to data loss or leakage.
Innovation Solution
A multiple data transmission system that modifies data packets by adding a destination address as a header, allowing simultaneous transmission through a single path while enhancing security, including an identification unit, generation unit, and transmission unit to manage data packets between separated networks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If a bidirectional data transmission system is used to transmit data between separated networks, then data transmission capability is improved, but data loss and security vulnerabilities occur due to inability to support all OSI layers
Solution Approach 1:
The patent segments the data transmission process into distinct phases: data collection phase where multiple data packets are gathered, and data transmission phase where packets are sent in batches. This segmentation allows the system to support all OSI layers while maintaining security through controlled transmission windows, resolving the contradiction between transmission capability and reliability.
Solution Approach 2:
The patent implements preliminary actions by collecting multiple data packets before transmission and verifying their integrity beforehand. The system prepares data in advance, checks for completeness and security requirements, then transmits in controlled batches. This preliminary processing prevents data loss and security issues while maintaining high transmission capability.
2Reliability
If network separation is implemented to block malicious code and prevent information leakage, then security is improved, but data transmission efficiency deteriorates due to difficulty in transmitting data between networks
Solution Approach 1:
The patent merges multiple data transmission operations into a single batch transmission process. Instead of transmitting data one packet at a time through the security barrier, the system collects multiple packets and transmits them together in controlled batches. This merging approach maintains security by controlling transmission windows while dramatically improving data transmission efficiency.
Solution Approach 2:
The patent ensures continuity of useful action by maintaining persistent connection windows between separated networks. Once a transmission window is established, multiple data packets can be continuously transmitted through it without repeated connection establishment. This continuous batch transmission maintains security through controlled access while maximizing transmission efficiency.
3Reliability
If a physical one-way transmission system is used to eliminate reverse data transmission, then security against reverse hacking is improved, but information leakage risks remain through secure USB and cable connections
Solution Approach 1:
The patent introduces an intermediary transmission control mechanism that manages all data traffic between separated networks. This intermediary system acts as a gatekeeper, allowing only authorized data transmissions through controlled windows while blocking unauthorized reverse transmissions and preventing information leakage through USB and cable connections. The intermediary maintains security without requiring physical one-way infrastructure.
Data Source
AI summary
A multiple data transmission method and a multiple data transmission system are disclosed. A multiple data transmission system, according to one embodiment of the present invention, comprises: an identification unit for identifying, from among a plurality of separated networks, a first network to which a transmission device requesting data transmission belongs; a generation unit for generating a data packet by adding a destination address set for the first network as a header to data transmitted from the transmission device; and a transmission unit for transmitting the data packet to a reception device identified by the destination address, through a transmission path which connects the first network and a second network to which the reception device belongs.