Unidirectional Data Transfer Apparatus for Repercussion-Free Network Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional solutions for unidirectional data transfer between network zones with different security levels, such as industrial control networks and office networks, do not guarantee freedom from repercussions, and require expensive and inflexible hardware, making it difficult to update protocols and ensure security.
Innovation Solution
A method and apparatus for transforming data from a network data format to a transport data format for unidirectional transfer, using protocol conversion, redundancy, and cryptographic protection, allowing for the use of inexpensive hardware like network taps or switches, and enabling secure communication without converting back to the original format within the high-security zone.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional firewalls are used to restrict bidirectional data communication, then data transfer between network zones is controlled, but freedom from repercussions is not guaranteed
Solution Approach 1:
The system segments the data transfer process into distinct unidirectional components: a data capture unit in the security-relevant network zone that only extracts and exports data, separated from the receiving end in the non-security-relevant zone. This physical and functional segmentation ensures that no data can flow back into the security-relevant zone, guaranteeing freedom from repercussions without complex firewall rules.
Solution Approach 2:
The patent introduces an intermediary unidirectional data connection (data diode) between the two network zones. This intermediary component physically enforces one-way data flow, acting as a mediator that allows data export while preventing any potential repercussions from the non-security-relevant zone back to the security-relevant zone, simplifying the security architecture.
2Adaptability or versatility
If specific transmitting and receiving components are used with data diodes, then bidirectional communication protocols can be realized, but hardware cost and complexity increase
Solution Approach 1:
The patent extracts the protocol conversion functionality from specialized hardware components and relocates it to software running on standard computing devices. The data capture unit uses software-based protocol adaptation to convert security-relevant network protocols into unidirectional transport protocols, eliminating the need for expensive dedicated transmitting and receiving components while maintaining protocol compatibility.
Solution Approach 2:
Instead of requiring specialized hardware components, the system uses software-based protocol implementations that can be copied and deployed on standard hardware platforms. This allows bidirectional communication protocols to be realized through software emulation rather than dedicated hardware, reducing hardware complexity and cost.
3Reliability
If certified network components are used in security-relevant zones, then functional safety is ensured, but protocol updates and new implementations are difficult and costly
Solution Approach 1:
The system segments certified and non-certified components into different network zones. The data capture unit in the security-relevant zone uses only certified components for data extraction, ensuring functional safety. The protocol conversion and data processing occur in the non-security-relevant zone using non-certified, easily updatable components, allowing flexible protocol updates without compromising safety certification.
Solution Approach 2:
The unidirectional data connection acts as an intermediary boundary between certified and non-certified components. This allows the system to maintain functional safety guarantees in the security-relevant zone while enabling flexible protocol updates and new implementations in the receiving zone, as no data flows back to potentially compromise the certified environment.
4Reliability
If data are transferred in original network format, then data integrity is maintained, but security risks increase due to potential contamination
Solution Approach 1:
The unidirectional data connection serves as an intermediary that transfers data from the security-relevant zone without allowing any return flow. This mediator ensures data integrity by preventing contamination from the non-security-relevant zone, while the unidirectional nature inherently blocks harmful factors from entering the security-relevant network.
Solution Approach 2:
The system extracts only the necessary data from the security-relevant network for export, leaving the core security-relevant data intact and isolated. By extracting and exporting only non-critical data through the unidirectional connection, the system maintains data integrity of the security-relevant zone while minimizing exposure to potential contamination risks.
Data Source
AI summary
Provided is a transmission device for feedback-free unidirectional transmission of data from a first network zone into a second network zone for evaluation at a remote application server, containing: a data export device which is arranged in the first network zone and is designed to detect the data transmitted in a network data format in the first network zone and to transform the data from the network data format into a transport data format, a unidirectional data transmission unit, which is designed to transmit the data in the transport data format into the second network zone unidirectionally, a data import device which is designed to transform the data from the transport data format back into the network data format and to transmit the data to an application server, wherein the data import device and the application server are arranged in a second network zone remote from the first zone.