PTP Switch Timestamp Filtering for Secure One-Way Data Transmission
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing one-way transmission systems between secure and unsecure sites are vulnerable to attacks during firmware upgrades or maintenance, where devices in the secure site can transmit malicious information to the unsecure site, posing a risk to the unsecure site's security.
Innovation Solution
A communication system utilizing a precision time protocol (PTP) switch, a one-way link circuit, and a grandmaster clock, with a programmable logic device (PLD) that filters data packets based on timestamps to ensure only authorized data is transmitted from the secure site to the unsecure site, preventing unnecessary information from being sent.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If a one-way link is implemented to transmit data from secure site to unsecure site, then data transmission capability is improved, but security vulnerability increases because devices in secure site can still transmit malicious information during firmware upgrading or maintenance
Solution Approach 1:
The patent introduces a gateway device as an intermediary between the secure site (OT network) and unsecure site (IT network). This gateway acts as a mediator that filters and validates data packets using timestamps, allowing legitimate data transmission while blocking malicious information. The gateway device with timestamp validation mechanism resolves the contradiction by enabling productivity improvement through controlled data transmission while maintaining security reliability through active filtering of unauthorized packets.
2Reliability
If timestamp validation is implemented to filter data packets, then security against malicious information is improved, but system complexity increases due to additional validation mechanisms
Solution Approach 1:
The patent uses timestamp as a key parameter for validating data packets. By changing the validation approach from complex content analysis to simple timestamp comparison, the system achieves improved security reliability with minimal increase in complexity. The gateway device compares timestamps in incoming packets against expected time ranges, providing an efficient filtering mechanism that balances security enhancement with system simplicity.
3Ease of operation
If devices in secure site transmit data to unsecure site during maintenance, then maintenance capability is improved, but risk of malicious virus transmission increases
Solution Approach 1:
The patent implements preliminary timestamp validation on data packets before they are allowed to pass from the secure site to the unsecure site. This preliminary action of timestamp checking is performed in advance during maintenance operations, ensuring that only packets with valid timestamps (and thus legitimate source identification) are transmitted. This approach maintains ease of operation for authorized maintenance while preventing malicious virus transmission by blocking unauthorized packets before they can reach the unsecure site.
Data Source
Figure 1~2
Figure 3~4
Figure 5~6
AI summary
A communication system and a communication method for one-way transmission are provided. The communication method includes: receiving, by a precision time protocol switch, a first synchronization message from a grandmaster clock; generating, by the precision time protocol switch, a second synchronization message according to the first synchronization message; transmitting, by the precision time protocol switch, the second synchronization message to a transmitting server and a programmable logic device; generating, by the transmitting server, a timestamp according to the second synchronization message; transmitting, by the transmitting server, at least one data packet and the timestamp to the precision time protocol switch; forwarding, by the precision time protocol switch, the at least one data packet and the timestamp to the programmable logic device; and determining, by the programmable logic device, whether to output the at least one data packet according to the timestamp and the second synchronization message.