Secure Data Transfer via Link-Layer Protocol Conversion
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current mechanisms for secure data transfer between networks struggle to distinguish required data from malicious code, leading to potential propagation of malware across networks, which can compromise destination network security and performance.
Innovation Solution
A computer-implemented system converts data frames from a data link layer protocol to an application layer protocol, interpreting information as numerical values rather than executable code, thereby preventing malicious code propagation by terminating communication at the data link layer, ensuring secure data transfer between networks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data frames are propagated from source network to destination network through full OSI model layers, then complete data communication is achieved, but malicious code can be reconstructed and activated at the destination network
Solution Approach 1:
The patent extracts only the necessary data from the data frame at the data link layer (Layer 2) and discards the higher-layer protocols (Layers 3-7) that could potentially reconstruct malicious code. By taking out only the essential numerical values and eliminating the protocol layers that enable code execution, the system prevents malicious code propagation while maintaining data communication functionality.
Solution Approach 2:
The patent introduces an intermediary conversion process at the data link layer that translates data frames into a neutral numerical format before passing them to the destination network. This intermediary layer acts as a barrier that prevents direct protocol-to-protocol communication, thereby blocking the reconstruction of malicious code while still allowing data transmission.
2Adaptability or versatility
If data is interpreted as executable code through OSI model layers, then full communication functionality is achieved, but security vulnerabilities increase
Solution Approach 1:
The patent changes the interpretation parameter of data at the data link layer from 'executable code' to 'numerical values'. By altering how the data is interpreted (from code to pure data), the system maintains communication versatility while eliminating the security vulnerability that arises when data is treated as executable code through higher OSI layers.
3Productivity
If conventional secure data transfer mechanisms are used, then data propagation is achieved, but distinction between required data and malicious code becomes difficult
Solution Approach 1:
The patent performs preliminary action by converting data frames to numerical values at the data link layer before the data reaches higher protocol layers where malicious code could be hidden. This early conversion prevents malicious code from being embedded in protocol structures, making detection unnecessary as the conversion process itself inherently prevents code injection.
Data Source
AI summary
A data frame transmitted over a serial link between a destination network and a source network is received by a computer-implemented system in the destination network. The data frame is compatible with a data link layer protocol and includes a data field. The computer-implemented system in the destination network converts the data frame directly into a format compatible with an application layer protocol, where converting the data frame into the format comprises interpreting received information included in the data field as numerical values rather than executable code. The computer-implemented system in the destination network outputs the numerical values to an application in the destination network.