Hardware Connection Power Control for Secure Data Copying
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current power control technologies for device connectivity lack effective methods to securely disconnect and reconnect hardware connections, particularly in data transfer scenarios, leading to potential unauthorized access and data vulnerabilities.
Innovation Solution
A method and system that utilize a processor to schedule data copying between production and secure hardware devices by disabling and enabling network connections using network switches, employing radio frequency control signals to manage power and prevent unauthorized access, thereby creating a secure 'airgap' for data protection.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If hardware connections are continuously enabled for data access, then data accessibility and system availability are improved, but security and protection against unauthorized access deteriorate
Solution Approach 1:
The system performs preliminary actions by scheduling the data copy function in advance and pre-disabling the first hardware connection before the actual data transfer begins. This ensures that the production hardware device is isolated from the production network before data copying starts, preventing unauthorized access while maintaining scheduled data accessibility.
Solution Approach 2:
The patent implements dynamic control of hardware connections by enabling and disabling them based on the operational state. The first hardware connection is disabled during data copying and re-enabled after completion, while the second hardware connection is dynamically activated for secure device communication. This dynamic switching resolves the contradiction between continuous accessibility and security isolation.
2Object-affected harmful factors
If hardware connections are disabled to secure data, then security against unauthorized access is improved, but data transfer efficiency and system availability deteriorate
Solution Approach 1:
The system segments the hardware connections into two distinct paths: a first hardware connection for production network access and a second hardware connection for secure device communication. By segmenting these functions, the system can disable the first connection for security without affecting the second connection's ability to enable data transfer, thus maintaining efficiency while ensuring security.
Solution Approach 2:
The controller acts as an intermediary that manages both hardware connections and coordinates the data copying process. It enables the second hardware connection to facilitate secure data transfer while managing the first hardware connection's disconnection, ensuring that data transfer efficiency is maintained through proper coordination and scheduling.
3Object-affected harmful factors
If power control is implemented to disconnect devices, then security and attack surface reduction are improved, but system complexity and control difficulty increase
Solution Approach 1:
The controller performs multiple functions including scheduling data copies, managing the first hardware connection for production network access, and managing the second hardware connection for secure device communication. By consolidating these functions into a single multi-functional controller, the system reduces overall complexity while maintaining effective power control and security isolation.
4Object-affected harmful factors
If scheduled data copying is implemented, then data security and isolation are improved, but time consumption and operational duration increase
Solution Approach 1:
The system schedules the data copy function in advance and disables the first hardware connection before the actual copying begins. This preliminary preparation ensures that security isolation is established beforehand, allowing the data copying to proceed efficiently without time-consuming security checks during the transfer process.
Data Source
AI summary
A method, system, and program product for controlling power associated with connectivity between devices is provided. The method includes scheduling a copy function associated with copying data from a production hardware device to a secure hardware device at a specified time period. A first hardware connection between the production hardware device and a production network associated with the production hardware device is disabled during the specified time period and a second hardware connection between the production hardware device and the secure hardware device is enabled. A subsequent copy function is enabled for copying the data from the production hardware device to the secure hardware device. The second hardware connection between the production hardware device and the secure hardware device is disabled after the copy function has completed. In response, the first hardware connection between the production hardware device and the production network is enabled.