Unidirectional Ethernet Switch for Secure Multi-Computer Peripheral Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing solutions for remote control of multiple computers across different networks are complex and insecure, particularly when it comes to maintaining separation between networks with varying security constraints, as they often require a central unit that can inadvertently transfer information between networks.
Innovation Solution
A selective connection device that allows peripherals to be connected to target computers via physically unidirectional communication links, using Ethernet interfaces with diode devices or unidirectional Ethernet interfaces to prevent information transfer between target computers, ensuring secure and seamless switching between networks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If software solutions are used to remotely control multiple computers across different networks, then remote control capability is improved, but network security is worsened due to potential information transfer between separated networks
Solution Approach 1:
The communication path is segmented into two separate unidirectional links: one for control commands (peripheral to computer) and one for graphical data (computer to peripheral). This segmentation ensures that information cannot flow bidirectionally between different networks, maintaining security while enabling remote control functionality.
Solution Approach 2:
The patent implements asymmetric communication by using physically unidirectional Ethernet interfaces with diodes. The control direction (peripheral to computer) and display direction (computer to peripheral) use separate physical paths, creating an asymmetric architecture that prevents information leakage between networks while maintaining full remote control capability.
2Adaptability or versatility
If a central control unit is used to manage communication between peripherals and multiple target computers, then control functionality is improved, but device complexity is worsened
Solution Approach 1:
The patent extracts the control unit from the selective connection device, allowing the device to function as a simple passive switch for Ethernet signals. This extraction reduces the complexity of the connection device while maintaining control functionality through the use of unidirectional Ethernet interfaces that inherently manage the control data flow without requiring active processing.
3Adaptability or versatility
If bidirectional Ethernet links are used to connect peripherals to multiple target computers, then communication flexibility is improved, but information security is worsened due to potential data leakage between networks
Solution Approach 1:
The patent replaces bidirectional Ethernet links with asymmetric unidirectional links using physical diodes. This ensures that control commands can flow from peripherals to computers while graphical data flows from computers to peripherals, but information cannot leak between different target computers through the same interface, maintaining network security.
Solution Approach 2:
The unidirectional Ethernet interface acts as an intermediary that allows controlled information flow in one direction while blocking flow in the opposite direction. This intermediary component enables communication flexibility for the intended purpose while preventing information security breaches between separated networks.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
Enables secure remote control of multiple computers across different networks without information transfer between them, simplifying the process of switching between target computers and maintaining network security by using physically unidirectional communication links.
Implementation Method 1
said selective connection device incorporating means for making the communication between said control means and said target computer physically unidirectional
Data Source
Figure 1
Figure 2~3
Figure 4
AI summary
The present invention relates to a selective connection device for connecting at least one peripheral to a target computer and a selective control system comprising such a device. It is particularly relevant to the field of selective connection devices for a control unit composed of input/output peripherals to different target computers. More specifically, the invention relates to such a device that provides security guarantees by preventing communication between the different target computers that can be controlled. This device allows at least one computer peripheral to be selectively connected to a target computer from among a plurality of target computers. The connections between the peripheral and the target computer are physically unidirectional.In cases where data input and data output devices are to be connected to the target computer, two unidirectional selection devices operating in opposite directions are used. Furthermore, in this case, the local control means for the data output device(s) and the data input device(s) are physically separate and not connected to each other.