Proof-Carrying Data for Cross-Domain Information Sharing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current cross-domain solutions (CDS) face challenges in enabling seamless and secure information exchange across security domains, particularly in dynamic and contested environments where devices lack computing resources and network connectivity, leading to impediments in mission execution and information sharing.
Innovation Solution
A distributed cross-domain solution (CDS) system that employs proof-carrying data (PCD) computations, allowing untrusted nodes to perform operations like filtering, sanitizing, and validating data items, and generating cryptographic proofs to ensure data integrity and validity, which are then transmitted across security domains, with trusted nodes determining forwarding based on these proofs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If enterprise CDS or tactical CDS is used to perform all CDS functions, then data security and integrity are ensured, but device portability and field autonomy are reduced
Solution Approach 1:
The patent segments the monolithic CDS functionality into distributed microservices that can be independently deployed across multiple devices. Each device runs a lightweight CDS agent that can perform basic filtering and validation operations locally, while more complex operations can be offloaded to other devices in the network. This segmentation enables field devices to operate autonomously without requiring constant connection to enterprise CDS infrastructure.
Solution Approach 2:
The patent creates a universal CDS framework that can operate in multiple modes: standalone field mode, networked field mode, and enterprise-integrated mode. The same CDS agent can perform different functions depending on the operational context, providing both portability and enterprise-grade security when needed. This multi-functionality resolves the contradiction by making the system adaptable to different operational requirements.
2Adaptability or versatility
If full CDS functionality is implemented on field devices, then field autonomy is improved, but device complexity and resource requirements increase
Solution Approach 1:
The patent implements dynamic capability negotiation where field devices can adjust their CDS functionality based on available computational resources and network conditions. The CDS agent can dynamically load additional modules or offload operations to other devices in the network, allowing field autonomy to be achieved without permanently increasing device complexity. The system adapts its resource requirements based on operational needs.
Solution Approach 2:
The patent introduces a lightweight CDS agent as an intermediary layer between field devices and the data sharing infrastructure. This agent handles complex CDS operations and can coordinate with other agents in the network to distribute computational load. Rather than requiring each field device to have full CDS functionality, the intermediary agent enables collaboration between devices with limited individual capabilities.
3Reliability
If data filtering and validation are performed at multiple nodes, then data integrity is improved, but processing time and network overhead increase
Solution Approach 1:
The patent implements preliminary data validation and filtering at the source device before data enters the network. The CDS agent at the originating device performs initial sanity checks, format validation, and obvious filtering operations, so that downstream nodes don't need to reprocess already-validated data. This preliminary action reduces the computational burden on intermediate nodes while maintaining overall data integrity.
Solution Approach 2:
The patent implements a feedback mechanism where CDS agents at different nodes share information about data validation results and filtering decisions. When one node successfully validates and filters data, this information is fed back to other nodes in the network, allowing them to skip redundant validation steps. The feedback system enables nodes to make informed decisions about whether to perform full validation or trust previously validated data, reducing overall processing time while maintaining integrity.
Data Source
AI summary
Techniques for verifiable computation for cross-domain information sharing are disclosed. An untrusted node in a distributed cross-domain solution (CDS) system is configured to: receive a first data item and a first cryptographic proof associated with the first data item; perform a computation on the first data item including one or more of filtering, sanitizing, or validating the first data item, to obtain a second data item; generate, using a proof-carrying data (PCD) computation, a second cryptographic proof that indicates (a) validity of the first cryptographic proof and (b) integrity of the first computation on the first data item; and transmits the second data item and the second cryptographic proof to a recipient node in the distributed CDS system. Alternatively or additionally, the untrusted node may be configured to transmit a cryptographic proof to a trusted aggregator in the CDS system.