Data Diode Pulse Control for Secure OT Malfunction Response
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data diodes prevent unauthorized access but hinder remote response to malfunctions on OT networks, leading to decreased productivity and potential disasters due to delayed on-site intervention.
Innovation Solution
A data diode configuration with a transmitting side device, receiving side device, and one-way communication unit, where the receiving side generates a pulse signal upon IT network instruction, allowing remote malfunction resolution by transmitting a pulse signal to OT devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a data diode is used to enable one-way communication from OT network to IT network, then network security is improved and unauthorized access is prevented, but the ability to remotely access OT network for malfunction response is lost
Solution Approach 1:
The system is divided into two distinct communication paths: a data transmission path (OT to IT network) and a control signal path (IT to OT network). The data diode handles data transmission one-way, while a separate control signal transmission unit handles malfunction response signals, allowing security and operational capability to coexist through functional segmentation.
Solution Approach 2:
The control signal transmission unit acts as an intermediary that receives malfunction information from the IT network side and transmits control signals back to the OT network side without creating a direct bidirectional communication path. This intermediary mechanism enables remote response while maintaining the one-way data flow security model.
2Reliability
If data diode prevents reverse information transmission, then security is enhanced, but malfunction detection and recovery capability is reduced
Solution Approach 1:
The system prepares control signals in advance that can be transmitted to the OT network side when malfunctions occur. The control signal transmission unit is pre-configured to send predetermined control signals (such as reset commands) to specific control devices on the OT network side, enabling quick malfunction recovery without needing to physically access the site.
Solution Approach 2:
The system establishes a feedback mechanism where malfunction information from the OT network is transmitted to the IT network side, and the control signal transmission unit sends control signals back based on this feedback. This allows the system to detect malfunctions remotely and automatically respond with appropriate control signals, maintaining ease of repair while preserving security.
3Reliability
If one-way communication is implemented, then unauthorized access is prevented, but productivity decreases due to delayed on-site intervention
Solution Approach 1:
The system replaces the mechanical approach of physical on-site intervention with an electronic control signal transmission mechanism. When malfunctions occur, control signals are electronically transmitted through the control signal transmission unit to trigger automated responses or remote control actions, eliminating the need for personnel to travel to the site and thereby maintaining productivity while preserving security.
Data Source
AI summary
To enable remote response in the case of a malfunction occurrence while ensuring security.A transmitting side device that transmits data from an OT network, a receiving side device that transmits input data to an IT network, and a one-way communication unit that transmits data transmitted by the transmitting side device to the receiving side device are provided. The receiving side device includes a pulse generating unit that is started in response to an instruction from the IT network and generates a pulse signal. The transmitting side device includes a pulse output unit that outputs the pulse signal generated by the pulse generating unit to an OT side device connected to the OT network.