One-Way Data Transfer Reconciliation via Log Comparison

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

In one-way data transfer systems, detecting transmission errors is challenging due to the lack of feedback mechanisms, making it difficult to validate the unidirectional data flow and ensure error-free data transfer.

Innovation Solution

A method and system that include send and receive log file monitoring modules to generate log files, which are then compared by a reconciliation module to identify and report any data transfer errors, with a web server providing user access to these errors, ensuring secure and reliable data transfer.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If one-way data transfer systems are implemented to ensure security, then protection from unauthorized data disclosure is improved, but the ability to detect transmission errors deteriorates due to lack of feedback mechanisms

Engineering Contradiction:

Improveprotection from unauthorized data disclosureVSAvoiddetection of transmission errors

Core Design Contradiction:

ReliabilityVSDifficulty of detecting and measuring

Solution Approach 1:

The patent introduces a third server as an intermediary that receives log files from both the send-only and receive-only servers. This intermediary server enables error detection by comparing logs from both sides without requiring direct communication between the send and receive servers, thus maintaining the one-way security architecture while enabling transmission error detection.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent implements a feedback mechanism where log files from the receive-only server are transmitted back to the third server for comparison with send-only logs. This feedback loop allows the system to detect transmission errors by comparing what was sent with what was received, while still maintaining the unidirectional data transfer security model.

Inventive Principle:

Principle #23Feedback

2Reliability

If hardware-based unidirectional interfaces are used to enforce one-way data transfer, then the unidirectional policy and non-bypassable operation are validated to high assurance, but additional mitigations are required to ensure against failure due to incorrect configuration

Engineering Contradiction:

Improveunidirectional policy validationVSAvoidadditional mitigations for configuration failure

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The system performs self-verification by automatically comparing log files from both ends of the unidirectional interface. This self-service mechanism detects configuration errors and transmission issues without requiring external intervention, reducing the need for additional complex mitigations while maintaining high assurance of unidirectional operation.

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The patent replaces physical hardware verification mechanisms with software-based log file comparison. Instead of relying solely on hardware enforcement, the system uses software analysis of transfer logs to verify unidirectional operation, simplifying the overall system while maintaining security assurance.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

3Adaptability or versatility

If software-based one-way data transfer is implemented, then flexibility is improved, but it becomes difficult to validate and verify that the controlled interface is strictly one-way and failsafe

Engineering Contradiction:

Improveflexibility of data transfer systemVSAvoidvalidation of one-way interface

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The patent implements feedback through log file comparison between send-only and receive-only servers. This feedback mechanism provides verification that the software-based one-way interface is functioning correctly, allowing the system to maintain both flexibility and reliability through automated validation of unidirectional data transfer.

Inventive Principle:

Principle #23Feedback

Data Source

PatentUS9678921B2Method and apparatus for data transfer reconciliation

Publication Date: 2017.06.13 OWL CYBER DEFENSE SOLUTIONS LLC

AI summary

A method and system for monitoring data transfers over a one-way data link from a send node to a receive node. A send log file monitoring and transmitting module associated with the send node on a first server outputs a send log file containing information about data sent by the send node. A receive log file monitoring and transmitting module associated with the receive node on a second server outputs a receive log file containing information about data received by the receive node. A reconciliation module on a third server receives the send log file and the receive log file and identifies any data transfer errors by comparing the send log file with the receive log file. A web server is coupled to the reconciliation module to provide user access to the identified data transfer errors.