Unidirectional Dataflow Enforcer for Secure Remote Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Remote desktop software poses security risks when controlling an insecure computer from a secure one, as malicious software on the insecure computer can compromise the secure computer through bidirectional communication.
Innovation Solution
Implementing a unidirectional dataflow enforcer, which allows data flow from the secure computer to the insecure computer while preventing flow in the reverse direction, combined with dedicated hardware for video output to ensure secure control without risking the secure computer's security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If bidirectional communication is implemented between secure and insecure computers, then control functionality is improved, but security is worsened
Solution Approach 1:
The communication channel is segmented into two separate unidirectional connections: one for transmitting control instructions from secure to insecure computer, and another for transmitting video output from insecure to secure computer. This segmentation eliminates bidirectional communication risks while preserving full control functionality.
Solution Approach 2:
A unidirectional dataflow enforcer acts as an intermediary device between the secure and insecure computers. It enforces one-way data flow from secure to insecure computer, preventing any reverse communication that could compromise security while allowing control instructions to pass through.
2Ease of operation
If video output is transmitted over network connection, then remote viewing is improved, but security is worsened
Solution Approach 1:
The video output transmission uses a dedicated unidirectional connection as an intermediary channel that only allows data flow from the insecure computer to the secure computer. This dedicated channel prevents malicious software from exploiting the video path to compromise the secure system.
Solution Approach 2:
The patent replaces software-based video transmission over network protocols with a dedicated hardware connection that provides physical layer security. This substitution eliminates vulnerabilities associated with software implementation while maintaining video transmission functionality.
3Reliability
If unidirectional dataflow enforcer is implemented, then security is improved, but device complexity is worsened
Solution Approach 1:
The unidirectional dataflow enforcer serves as a dedicated intermediary device that handles security enforcement externally. By offloading security functionality to a separate hardware component, the secure computer's software complexity is reduced while overall system security is enhanced.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A computer system for securely controlling an insecure computer is provided. The system comprises an insecure computer (100), a secure computer (200) and a unidirectional dataflow enforcer (400). The insecure computer comprises a dedicated video output with a hardware interface, and is configured to transmit, by the video output, a screen image of its operating system interface to a secure computer over a first connection and to receive instructions for controlling the insecure computer over a second connection. The secure computer is configured to receive the video output of the insecure computer over the first connection and to transmit instructions for controlling the insecure computer over the second connection. The unidirectional dataflow enforcer is configured to enforce unidirectional dataflow between the secure computer and the insecure computer, such that dataflow from the secure computer to the insecure computer over the second connection is allowed, but dataflow from the insecure computer to the secure computer over the second connection is prevented. A corresponding method is also provided.