Uni-directional TLS Tunneling for Secure Remote File Transfer
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current communication technologies fail to provide secure and reliable file transfer solutions for power plant monitoring systems with limited bandwidth and unstable connections, while also needing to comply with regulatory security requirements like NERC, and lack a uni-directional general purpose file transfer solution.
Innovation Solution
A system using a customized software package with HTTPS/TLS protocols and an intelligent agent for secure remote access, enabling asynchronous and parallel data transfer between onsite monitoring and central diagnostic infrastructure, utilizing a uni-directional TLS tunneling methodology to ensure secure and reliable file transfer over low bandwidth connections.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If bi-directional TCP/HTTP communication ports are used for data transfer, then communication functionality is achieved, but security requirements cannot be met due to firewall restrictions
Solution Approach 1:
The patent introduces a file transfer service as an intermediary component that operates within the restricted network environment. This service uses a file system interface and message queue mechanism to bypass firewall restrictions, allowing secure file transfers without requiring blocked bi-directional communication ports. The intermediary abstracts the communication complexity while maintaining security compliance.
Solution Approach 2:
The communication process is segmented into distinct functional components: file transfer service, message queue system, and tunnel establishment mechanism. This segmentation allows each component to operate independently within its permitted communication scope, avoiding the need for comprehensive bi-directional port access while achieving the overall file transfer objective.
2Ease of manufacture
If standard communication protocols are used for file transfer, then ease of implementation is achieved, but performance degrades on low bandwidth and unstable connections
Solution Approach 1:
The system dynamically adjusts communication parameters based on connection quality. The file transfer service modifies transfer strategies, chunk sizes, and retry mechanisms according to detected network conditions, enabling reliable transfers over unstable low-bandwidth connections while maintaining simplicity through automated adaptation rather than complex manual configuration.
3Reliability
If uni-directional file transfer is implemented to meet security requirements, then security compliance is improved, but remote access capability is limited
Solution Approach 1:
The file transfer service is designed as a universal platform that handles multiple functions: secure file transfers, remote access facilitation, and administrative task execution. By making the service multi-functional, the system achieves security compliance through uni-directional communication while still providing comprehensive remote capabilities through a single versatile interface.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Embodiments of the disclosure can include systems and methods for secure remote transfers. The onsite monitoring system secure file transfer solution can allow for transferring operational data by an onsite system (110) behind a firewall (108) to a central monitoring and diagnostic infrastructure (110) by sending asynchronous, concurrent, parallel files over a port using a previously opened connection. The asynchronous TLS tunneling based remote desktop protocol solution is uni-directional because the communication ports are typically open outbound only.