Free Space Optical Data Exchange Across Air Gaps

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Computer systems under high network security restrictions face challenges in securely exchanging data with systems under different or lower security restrictions without being vulnerable to malicious attacks through traditional IP-based network communications.

Innovation Solution

Implementing free space optical communications systems that convert data into optical representations, allowing secure data exchange across an air gap by projecting and detecting images using optical sensors, thereby bypassing IP-based network vulnerabilities.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If physical isolation (air gap) is implemented to protect against unauthorized access, then security against malicious attacks is improved, but data exchange capability between computer systems deteriorates

Engineering Contradiction:
ImprovesecurityVSAvoiddata exchange capability
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent introduces an optical intermediary system consisting of optical writers, optical readers, and optical sensors that mediate data transfer between isolated computer systems. This intermediary enables communication across the air gap without direct electronic connection, resolving the contradiction between security isolation and data exchange capability

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent replaces traditional electronic/electromagnetic communication systems with an optical system. By substituting electronic signals with optical signals (light-based transmission), the system achieves secure data exchange across the air gap while maintaining communication functionality, thus resolving the contradiction between physical isolation for security and data exchange capability

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Adaptability or versatility

If IP-based network communications are used for data exchange, then data exchange capability is improved, but vulnerability to malicious attacks increases

Engineering Contradiction:
Improvedata exchange capabilityVSAvoidvulnerability to attacks
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The patent substitutes IP-based electronic network communications with optical communication systems. By replacing the electronic communication infrastructure with light-based transmission and optical processing, the system eliminates vulnerabilities associated with IP protocols and electronic network attacks while maintaining data exchange capability

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Applied Scientific Principles

This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.

Function Achieved in This Case

Enables secure data exchange between computer systems with varying security restrictions, reducing the risk of unauthorized access and resource expenditure on protection against malicious attacks.

Implementation Method 1

a first computer system can identify data for transmission to the second computer system, generate an optical representation of the data, and project the optical representation to the second computer system across an air gap extending between them

Methodology Applied
Scientific EffectOptical communication: Light

Implementation Method 2

The second computer system can detect the projected optical representation (for example, using one or more optical sensors), determine the data based on the detected optical representation

Methodology Applied
Scientific EffectOptical detection: Photoelectric Effect

Data Source

PatentUS11916591B2Systems and methods for securely exchanging data between computer systems using free space optical communications
Publication Date: 2024.02.27 SAUDI ARABIAN OIL CO
  • US11916591B2 patent drawing
  • US11916591B2 patent drawing
  • US11916591B2 patent drawing

AI summary

In an example method, a first computer system accesses, via a first communication network, data for transmission to a second computer system, generates an optical representation of the data, and presents the optical representation of the data to the second computer system via a free space communications link. Further, the second computer system receives the optical representation of the data from the first computer system via the free space communications link, determines the data based on the optical representation of the data, and transmits the data to one or more additional computer systems via a second communications network.