Unidirectional Interface for Secure Data Transfer

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current methods for securely transmitting sensitive data from a secure environment to field devices or branch offices via public or unsecured systems and networks are inadequate due to the risk of data compromise, especially on mobile devices, as they can be vulnerable to sophisticated attacks and malware.

Innovation Solution

A method involving encryption of data on a source device, transmission via a unidirectional interface through public or unsecured systems, and decryption on a target device, which is designed to prevent communication with external networks, using a cryptographic method with a smart card for authentication and temporary storage in volatile memory to ensure secure data output.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If data is transmitted via public or unsecured systems and networks, then field access and mobility are improved, but security and confidentiality deteriorate

Engineering Contradiction:
Improvefield accessVSAvoidsecurity
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The system segments the data transmission path into two distinct directions: a unidirectional interface for receiving data from the secure environment to the field device, and a separate bidirectional interface for the field device to communicate with external networks. This segmentation prevents reverse engineering and unauthorized data exfiltration while maintaining field access capability

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

A unidirectional interface acts as an intermediary component that allows data to flow from the secure environment to the field device without enabling bidirectional communication. This intermediary protects the secure environment from compromise while still providing necessary data access to field operations

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If the reading device can never communicate with the outside world, then confidentiality is improved, but the ability to transmit documents to field employees deteriorates

Engineering Contradiction:
ImproveconfidentialityVSAvoiddocument transmission capability
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The field device is divided into isolated communication domains: a unidirectional interface isolated from the outside world for receiving secure data, and a bidirectional interface that can communicate with external networks but cannot access the securely transmitted data, enabling both confidentiality and field transmission capability

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

Different parts of the field device have different communication capabilities: the unidirectional interface portion maintains strict confidentiality by never communicating back, while the bidirectional interface portion provides full external communication capability for operational needs, with each portion optimized for its specific function

Inventive Principle:
Principle #3Local quality

3Reliability

If encryption is applied to data, then security is improved, but ease of operation and user-friendliness deteriorate

Engineering Contradiction:
ImprovesecurityVSAvoiduser-friendliness
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The system performs encryption and decryption operations automatically without requiring user intervention. The unidirectional interface automatically encrypts data before transmission, and the field device automatically decrypts and processes the data, making security transparent to the user while maintaining ease of operation

Inventive Principle:
Principle #25Self-service

Data Source

PatentEP3133792B1Method for secure transfer of data from a protected environment to a field device
Publication Date: 2020.04.15 CERROM ENG GMBH
  • EP3133792B1 patent drawingFigure 1

AI summary

The invention relates to a method for the secure transmission of data from a source device in a secure environment to a target device in an insecure environment and optionally also vice versa, comprising the steps of: a) encrypting the data on the source device using a cryptographic method; b) transmitting the encrypted data to the target device, for example via unsecured networks or intermediate devices, and in a final step via a unidirectional interface comprising a sender and a receiver, wherein the receiver is part of the target device; c) decrypting the encrypted data on the target device; and d) outputting the data in decrypted form via the target device.