Data Diode Transmission Using Erasure Coding Across Air Gaps
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Transmitting data across data center air gaps using data diodes poses challenges due to limited or nonexistent two-way communication, making it difficult to ensure complete and error-free data delivery without redundant transmission that wastes resources.
Innovation Solution
Implementing an erasure coding algorithm to break data into smaller segments and append additional information for reconstruction, allowing reliable transmission across a data diode while minimizing computational overhead.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional two-way communication protocols (e.g., TCP with acknowledgments) are used across the air gap, then transmission reliability can be ensured through error checking and retry requests, but the data diode's one-way communication constraint is violated and the system becomes inoperable
Solution Approach 1:
The data is divided into multiple segments with identification information, allowing the receiver to reconstruct the original data from any sufficient number of segments without requiring two-way communication for error checking
Solution Approach 2:
Error checking and data verification are performed in advance by embedding redundancy information in the segmented data structure, eliminating the need for post-transmission retry requests and feedback mechanisms
2Reliability
If redundant data transmissions are performed to ensure complete delivery across the air gap, then data reliability is improved, but computing resources and bandwidth are wasted
Solution Approach 1:
The system changes the parameter of data representation by encoding data in segmented form with embedded redundancy, allowing the receiver to reconstruct original data from any sufficient number of segments, thereby reducing the need for redundant transmissions
3Measurement precision
If data is transmitted as complete packets with traditional error checking, then transmission accuracy can be verified, but the inability to implement feedback mechanisms in one-way communication makes error detection inoperable
Solution Approach 1:
The data segments contain embedded identification and redundancy information that enables the receiver to autonomously verify data integrity and reconstruct missing segments without requiring feedback communication to the sender
Data Source
AI summary
Techniques are disclosed for transmitting data across data diode of a cross domain system using an encoding algorithm. A sender node of the cross domain system can receive data for transmission across the cross domain system. The data can include a first number of data segments. The sender node can generate a datagram using the data and according to the encoding algorithm. The datagram can include a second number of data segments greater than the first number of data segments. The sender node can transmit the datagram to a receiver node of the cross domain system using a data diode. The receiver node can recover the data using at least a portion of the second number of data segments of the datagram.


