One-Way Data Exposure for Secure Red-Black Network Routing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current network architectures lack a suitable solution for enabling devices in a high-security (red) domain to obtain information from a low-security (black) domain without compromising the security requirements of the red domain, undermining centralized control of wide area networks.
Innovation Solution
A data exposure system comprising a proxy device and a diode is used to transmit metrology and topology data from a black domain to a red domain, with firewalls and intrusion prevention systems ensuring unidirectional, secure data transmission.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If a device in the red domain directly obtains information from devices in the black domain, then routing decisions can be made with complete information, but the security requirements of the red domain are compromised
Solution Approach 1:
A proxy device is introduced as an intermediary between the red domain and black domain. The proxy device collects metrology and topology data from the black domain and exposes this information to red domain devices through a controlled interface. This mediator enables information flow while maintaining security boundaries, as the proxy device acts as a buffer that translates and filters data between the two domains without allowing direct access.
Solution Approach 2:
The system segments the network into distinct security zones (red domain, black domain, and a transitional zone with the proxy device). By dividing the information access path into separate segments with controlled interfaces, the system allows red domain devices to obtain necessary routing information without direct exposure to the insecure black domain, thus maintaining security while enabling information flow.
2Extent of automation
If direct communication is allowed between red domain and black domain, then centralized control of WAN can be maintained, but security breaches may occur
Solution Approach 1:
The proxy device serves as an automated intermediary that maintains centralized control functionality. It automatically collects routing information from the black domain and makes this information available to red domain controllers, enabling automated routing decisions without requiring direct communication channels between security zones. This preserves the extent of automation while preventing security breaches.
3Productivity
If the red domain uses black domain infrastructure for transmission, then network resources are utilized efficiently, but the red domain becomes vulnerable to black domain security issues
Solution Approach 1:
The proxy device enables efficient utilization of black domain network infrastructure by collecting and exposing routing information about available paths and link qualities. This allows red domain traffic to be routed through black domain infrastructure optimally while the proxy device maintains a security boundary that prevents black domain security issues from affecting the red domain.
Solution Approach 2:
The system applies different security qualities to different parts of the network architecture. The red domain maintains high security standards, the black domain operates with its own security characteristics, and the proxy device creates a transitional zone with controlled access policies. This local differentiation allows efficient resource utilization in each domain while maintaining appropriate security postures.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
Enables secure transmission of black domain transmission conditions to the red domain, enhancing the red domain's routing capabilities without compromising its security.
Implementation Method 1
a diode placed between the proxy device and said equipment, the diode physically allowing unidirectional transmissions only from the proxy device to the domain of the second security level
Data Source
Figure 1
Figure 2
Figure 3~4
AI summary
A data exposure system (190) is configured to expose metrology and topology data from a communication network (100) in a first-level security domain to a device (160). The device (160) belongs to a higher second-level security domain. The data exposure system (190) comprises: a proxy device (120), configured to collect metrology and topology data from said communication network (100), and a diode (150) that physically allows unidirectional transmissions only from the proxy device (120) to the second-level security domain. Thus, information enabling routing decisions can be transmitted from the first-level security domain to the second-level security domain without compromising security.