Data Diode Error Feedback for Secure Missing Data Retransmission
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data diodes prevent unauthorized access by allowing only one-way communication but cannot respond to communication errors, leading to potential data loss due to missing data without retransmission mechanisms.
Innovation Solution
Incorporating an abnormality detection mechanism in the data diode that includes a reception side device to detect data transfer abnormalities and notify the transmission side, enabling retransmission when necessary without creating a reverse information path.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Object-affected harmful factors
If one-way communication is implemented in the data diode to prevent unauthorized access, then security is improved, but the ability to detect and respond to communication errors deteriorates
Solution Approach 1:
The patent implements feedback by having the reception side device detect communication errors and send notification packets back to the transmission side device through the one-way communication channel. This allows the transmission side to be informed of errors without creating a bidirectional communication path, thus maintaining security while enabling error detection and retransmission.
Solution Approach 2:
The patent uses notification packets as intermediaries to convey error information from the reception side device to the transmission side device. These packets serve as a mediator that enables error feedback without establishing a reverse information path, resolving the contradiction between security and error detection capability.
2Reliability
If retransmission mechanism is added to the data diode to prevent data loss, then data integrity is improved, but device complexity increases
Solution Approach 1:
The retransmission mechanism is enabled through feedback notification packets that convey error information from the reception side to the transmission side. This feedback loop allows the transmission side to detect errors and retransmit data only when necessary, improving data integrity without requiring continuous complex bidirectional communication.
Solution Approach 2:
The patent segments the communication mechanism into distinct functional parts: data transmission in one direction and error notification in the opposite direction. This segmentation allows the retransmission mechanism to be implemented using the existing one-way channel without adding complex bidirectional infrastructure, thus improving reliability with minimal increase in device complexity.
3Object-affected harmful factors
If manual extraction of missing data is required, then security is maintained, but productivity deteriorates due to manual intervention
Solution Approach 1:
The patent implements feedback mechanism that automatically notifies the transmission side device of communication errors occurring at the reception side. This enables automatic detection and retransmission of missing data without manual intervention, significantly improving productivity while maintaining the security benefits of one-way communication.
Solution Approach 2:
The system performs self-service by automatically detecting errors and initiating retransmission without requiring manual extraction of missing data. The feedback mechanism enables the system to self-correct data loss issues, improving productivity while preserving the security architecture of the data diode.
Data Source
AI summary
A transmission side device transmits data from an OT side device connected to an OT network. A reception side device transmits input data to an IT network. A one-way communication part transmits data transmitted from the transmission side device to the reception side device. The reception side device includes an abnormality detection part that detects the presence or absence of an abnormality in data transfer, and a reception side notification part that, based on the detected presence or absence of an abnormality in the data transfer, notifies the transmission side device of information indicating the presence or absence of an abnormality in the data transfer. The transmission side device includes a transmission side notification part that, based on the information indicating the presence or absence of an abnormality in the data transfer, if there is an abnormality in the data transfer, notifies the OT side device of the same.