Log Message Transmission via One-Way Data Unit
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for transmitting log messages from high-security networks to lower-security networks for real-time analysis are complex, prone to errors, and introduce significant time delays, making it difficult to promptly identify malfunctions and initiate countermeasures in safety-critical systems.
Innovation Solution
A method and device for direct, reaction-free transmission of individual log messages from a high-security network to a lower-security network using a listening device to continuously monitor and forward log messages via a one-way data transmission unit, ensuring immediate and unidirectional data flow without file-based processing, allowing for real-time analysis without interfering with the system.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If log messages are transmitted via log files with sequential writing and reading, then data integrity is maintained, but real-time analysis capability is lost due to significant time delays
Solution Approach 1:
The patent segments the log message transmission process into two independent channels: a primary log file channel for reliable storage and a separate real-time transmission channel for immediate forwarding. This segmentation allows the system to maintain data integrity through sequential file writing while simultaneously enabling real-time analysis through direct message forwarding, resolving the contradiction between reliability and time delay.
Solution Approach 2:
The patent introduces a log server as an intermediary component that receives log messages from devices, writes them to log files for reliable storage, and simultaneously forwards them to external systems for real-time analysis. This intermediary architecture decouples the reliability requirement (fulfilled by file writing) from the real-time requirement (fulfilled by immediate forwarding), eliminating the time delay contradiction.
2Reliability
If network taps or data diodes are used to ensure non-interfering coupling between safety-critical and diagnostic networks, then security requirements are met, but device complexity and cost increase significantly
Solution Approach 1:
The patent uses network taps to create a copy of the log message data stream and forwards this copy to the diagnostic network. This copying approach allows the diagnostic network to receive real-time log data without requiring complex bidirectional communication infrastructure, thereby meeting security requirements while reducing device complexity compared to full network tap implementations.
Solution Approach 2:
The patent extracts log messages from the safety-critical network's internal communication stream and redirects them to the diagnostic network through a unidirectional gateway. This extraction approach isolates the diagnostic functionality from the safety-critical network, meeting security requirements while avoiding the complexity of integrated monitoring systems.
3Adaptability or versatility
If cloud solutions are used for centrally storing and analyzing log data, then centralized analysis capability is provided, but real-time analysis is impractical due to data conversion requirements and system adaptation complexity
Solution Approach 1:
The patent performs preliminary actions by having the log server write log messages to files and prepare them for transmission in advance. This preliminary preparation allows the messages to be readily available for immediate real-time forwarding to external systems, eliminating the need for time-consuming data conversion when the messages are received, thus maintaining both centralized capability and real-time performance.
Data Source
Figure 1~2
Figure 3~4
AI summary
The invention relates to a method and to a transmission apparatus (30) for direct and feedback-free transmission of log messages from at least one first network (NW1) into a second network (NW2). Log messages are transmitted individually and directly. The log messages in the first network (NW1) are monitored by means of a monitoring device (2) and transmitted into the second network via a one-way data transmission unit (3). The transmission is thus carried out feedback-free and with integrity protected. The invention additionally comprises a log server (LS1) having a line loop (1). Local messages are transmitted via the line loop (1) and filtered, monitored by means of a monitoring device (2) and transmitted directly to a second log server (LS2) in the second network (NW2) via the one-way data transmission unit (3). Thus, efficient transmission of log messages into a second network (NW2) for real-time analysis is achieved.