Optical Communications Mounting Frame for Secure Data Exchange

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Traditional methods for extended communication from physically isolated devices are static, susceptible to interception, and unable to remotely audit security controls for critical systems, ensuring confidentiality, integrity, and availability.

Innovation Solution

The approach involves optically transmitting data between a Dedicated Mobile Device (DMD) and a Stand Alone Certificate Authority (SACA) using an Optical Communications Mounting Frame (OCMF), which stabilizes and secures the communication pathway, ensuring physical and logical binding, and uses unique IDs and encryption to prevent interception and unauthorized access.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional optical communication methods are used for extended communication from physically isolated devices, then communication capability is provided, but the communication is static and open to receipt by any nearby optical device, compromising security

Engineering Contradiction:
ImprovesecurityVSAvoidcommunication capability
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent introduces an Optical Communications Mounting Frame (OCMF) as an intermediary physical structure that mediates between the isolated device and external devices. The OCMF contains optical features that act as intermediaries to establish authenticated optical communication channels, preventing unauthorized devices from intercepting communications while enabling legitimate extended communication capabilities.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system performs preliminary binding between the isolated device and the OCMF during manufacturing or initial setup. This preliminary action establishes cryptographic credentials and optical feature mappings before actual communication occurs, ensuring that only pre-authenticated devices can communicate through the isolated device, thus resolving the security versus adaptability contradiction.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If traditional USB drive methods are used for data exchange, then data transfer is enabled, but the method is susceptible to interception and theft

Engineering Contradiction:
ImprovesecurityVSAvoiddata exchange capability
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent replaces the mechanical USB drive system with an optical communication system based on light transmission through displays and cameras. This substitution eliminates the physical vulnerability of USB drives to theft and interception while maintaining data exchange capability through wireless optical channels that are inherently more secure and easier to operate.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The OCMF serves as an intermediary that establishes secure optical channels between devices, replacing the direct physical connection of USB drives. The optical mounting frame with its authenticated optical features mediates the data exchange process, providing security against interception while enabling convenient wireless operation.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Reliability

If physically isolated devices are used for critical systems, then security is maintained, but the ability to remotely audit security controls is lost

Engineering Contradiction:
Improvesecurity isolationVSAvoidaudit capability
Core Design Contradiction:
ReliabilityVSDifficulty of detecting and measuring

Solution Approach 1:

The OCMF acts as a trusted intermediary that enables secure remote auditing of physically isolated devices. By establishing authenticated optical communication channels through the OCMF, auditors can remotely verify security controls, cryptographic credentials, and system integrity without compromising the physical isolation of critical systems.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system implements feedback mechanisms where the isolated device can optically transmit security status information, audit logs, and cryptographic verification data to remote auditing systems through the OCMF. This feedback capability enables continuous monitoring and verification of security controls while maintaining physical isolation.

Inventive Principle:
Principle #23Feedback

Data Source

PatentUS11240369B2Dedicated mobile device in support of secure optical data exchange with stand alone certificate authority
Publication Date: 2022.02.01 INTERNATIONAL BUSINESS MACHINE CORPORATION
  • US11240369B2 patent drawing
  • US11240369B2 patent drawing
  • US11240369B2 patent drawing

AI summary

An approach is disclosed that optically transmit data from a dedicated mobile device (DMD) to another device. Optically transmitting the data is performed by displaying the data on a display screen included in the DMD. The approach further optically receives data at the DMD. The data is received at a digital camera included in the DMD. Based on the exchanged data, the DMD determines if the DMD and the other device are bound to each other.