Priority Queueing for Secure One-Way Mission-Critical Data Transfer
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Mission critical systems face challenges in securely transmitting data to non-mission critical systems due to unidirectional data communication networks, where acknowledgments cannot be sent back, leading to inefficiencies and security vulnerabilities.
Innovation Solution
Implementing a data priority management component that prioritizes and manages data transmission based on levels, using unidirectional networks with symmetric encryption and QoS functionality, ensuring high-priority data is transmitted first, and employing key frames with interspersed updates to maintain data integrity and security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If data is transmitted over public telecommunication networks, then communication reach is expanded, but security and reliability are compromised
Solution Approach 1:
The network architecture is segmented into multiple domains (public network domain and private network domain) with clear boundaries. Data transmission is divided into different paths: sensitive data remains in private domains while non-sensitive data can utilize public domains, allowing selective use of public infrastructure without compromising overall security
Solution Approach 2:
Gateway devices and protocol translators serve as intermediaries between public and private network domains. These intermediaries enforce security policies, filter traffic, and ensure that data transmitted over public networks meets security requirements before entering private domains
2Reliability
If proprietary communication protocols are used, then data security is improved, but interoperability and ease of integration deteriorate
Solution Approach 1:
The system supports multiple communication protocols simultaneously within different domains. Public domain devices use standard protocols (TCP/IP, HTTP) for broad compatibility, while private domain devices can use proprietary protocols for enhanced security, with gateways enabling communication between different protocol families
Solution Approach 2:
Different security and protocol requirements are applied locally to different network domains. Sensitive communications within private domains use proprietary secure protocols, while public domain communications use standardized protocols, allowing each domain to be optimized for its specific requirements
3Ease of manufacture
If existing communication infrastructure is utilized, then deployment cost is reduced, but security control and reliability deteriorate
Solution Approach 1:
The system dynamically routes data through different network paths based on security requirements and threat levels. Non-sensitive data can flow through public infrastructure to reduce costs, while sensitive data is dynamically redirected through private secure channels, allowing cost optimization without sacrificing security control
Data Source
Figure 1A
Figure 1B
Figure 2
AI summary
Techniques for managing data flowing from mission critical systems. Embodiments include receiving a plurality of data values to transmit to a remote system using a unidirectional data communications network. The data values are prioritized according to a plurality of priority levels and the prioritized plurality of data values are grouped into one or more data updates for each of the plurality of priority levels. Embodiments enqueue the one or more data updates into a respective transmission queue corresponding to each of the plurality of priority levels and transmit the data updates over the unidirectional data communications network in an order determined based on the respective priority levels of the transmission queues.