Memory-Based Cross-Domain Device for Secure RAN Data Transfer
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data center and edge computing systems face challenges in efficiently managing cross-domain communication and data transfer between different computing domains, particularly in ensuring security, isolation, and compliance with varying trust levels and security policies.
Innovation Solution
The implementation of a memory-based cross-domain solution (M-CDS) device, which provides a secure and customizable memory-based interface for data transfer across multiple hosts in separate domains, using shared memory buffers and enforcing specific policies and protocols to ensure secure and controlled data exchange.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If traditional IP networks are used for cross-domain data transfer, then network compatibility and ease of operation are improved, but security isolation and data transfer control are worsened
Solution Approach 1:
The patent introduces a memory-based cross-domain solution (M-CDS) device as an intermediary between different computing domains. This device provides a controlled interface that enables data transfer while maintaining security isolation through buffer-based communication and policy enforcement, resolving the contradiction between network compatibility and security isolation.
2Productivity
If shared memory buffers are used for cross-domain data transfer, then data transfer speed and bandwidth are improved, but system complexity and isolation management are worsened
Solution Approach 1:
The M-CDS device acts as an intermediary that manages shared memory buffers between domains. It provides buffer allocation, access control, and policy enforcement mechanisms that enable high-speed data transfer while automating the complex isolation management tasks, thus resolving the contradiction between data transfer speed and isolation management complexity.
3Reliability
If domain isolation is enforced through separate computing platforms, then security and reliability are improved, but communication efficiency and data transfer performance are worsened
Solution Approach 1:
The patent merges the communication functionality into the memory interface itself by providing cross-domain capabilities directly at the memory buffer level. This allows domains to maintain their isolation while achieving efficient communication through unified memory-based interfaces with embedded policy enforcement, resolving the contradiction between security and communication efficiency.
Data Source
AI summary
A cross-domain device includes a first interface to couple to a first device and a second interface to couple to a second device, where the first device is to implement a first component in a radio access network (RAN) system in a first computing domain, and the second device is to implement a second component in the RAN system in a second computing domain. The first component is to interface within the second component in a RAN processing pipeline. The cross-domain device further comprises hardware to implement a communication channel between the first device and the second device to pass data from the first component to the second component, where the communication channel enforces isolation of the first computing domain from the second computing domain.