Data Diode Transmission Using Erasure Coding Across Air Gaps

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Transmitting data across data center air gaps using data diodes poses challenges due to limited or nonexistent two-way communication, making it difficult to ensure complete and error-free data delivery without redundant transmission that wastes resources.

Innovation Solution

Implementing an erasure coding algorithm to break data into smaller segments and append additional information for reconstruction, allowing reliable transmission across a data diode while minimizing computational overhead.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional two-way communication protocols (e.g., TCP with acknowledgments) are used across the air gap, then transmission reliability can be ensured through error checking and retry requests, but the data diode's one-way communication constraint is violated and the system becomes inoperable

Engineering Contradiction:
Improvedata transmission reliabilityVSAvoidprotocol compatibility
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The data is divided into multiple segments with identification information, allowing the receiver to reconstruct the original data from any sufficient number of segments without requiring two-way communication for error checking

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

Error checking and data verification are performed in advance by embedding redundancy information in the segmented data structure, eliminating the need for post-transmission retry requests and feedback mechanisms

Inventive Principle:
Principle #10Preliminary action

2Reliability

If redundant data transmissions are performed to ensure complete delivery across the air gap, then data reliability is improved, but computing resources and bandwidth are wasted

Engineering Contradiction:
Improvedata delivery completenessVSAvoidcomputing resource consumption
Core Design Contradiction:
ReliabilityVSLoss of energy

Solution Approach 1:

The system changes the parameter of data representation by encoding data in segmented form with embedded redundancy, allowing the receiver to reconstruct original data from any sufficient number of segments, thereby reducing the need for redundant transmissions

Inventive Principle:
Principle #35Parameter changes

3Measurement precision

If data is transmitted as complete packets with traditional error checking, then transmission accuracy can be verified, but the inability to implement feedback mechanisms in one-way communication makes error detection inoperable

Engineering Contradiction:
Improvedata integrity verificationVSAvoiderror checking operability
Core Design Contradiction:
Measurement precisionVSEase of operation

Solution Approach 1:

The data segments contain embedded identification and redundancy information that enables the receiver to autonomously verify data integrity and reconstruct missing segments without requiring feedback communication to the sender

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS20260025233A1Reliable data diode transmission using erasure coding
Publication Date: 2026.01.22 ORACLE INT CORP
  • US20260025233A1 patent drawing
  • US20260025233A1 patent drawing
  • US20260025233A1 patent drawing

AI summary

Techniques are disclosed for transmitting data across data diode of a cross domain system using an encoding algorithm. A sender node of the cross domain system can receive data for transmission across the cross domain system. The data can include a first number of data segments. The sender node can generate a datagram using the data and according to the encoding algorithm. The datagram can include a second number of data segments greater than the first number of data segments. The sender node can transmit the datagram to a receiver node of the cross domain system using a data diode. The receiver node can recover the data using at least a portion of the second number of data segments of the datagram.