Security Gateway Unidirectional Data Error Recovery

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In one-way data communication, existing methods fail to efficiently notify errors in transmitted data without degrading the characteristics of the communication, as they either require self-error recovery with long encoding and decoding times or add a separate communication link, which affects the communication's integrity.

Innovation Solution

A system where a reception apparatus can switch connections with the transmission apparatus upon detecting errors, allowing for re-transmission of erroneous data, and encrypts data using a cipher key to establish a secure tunnel, utilizing an integrity value for error detection.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If self error recovery method is used, then error detection capability is improved, but encoding and decoding time increases significantly

Engineering Contradiction:
Improveerror detection capabilityVSAvoidencoding and decoding time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent extracts the error notification function from the data stream by using a separate physical connection (reverse connection) that is dedicated solely to transmitting error information. This separates the error detection function from the data transmission function, allowing fast error notification without affecting the data encoding/decoding process.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent introduces a reverse connection as an intermediary channel between the reception apparatus and transmission apparatus. This intermediary connection carries error information in a separate physical layer, acting as a mediator that enables error notification without interfering with the main data transmission path.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If a separate communication link is added for error notification, then error detection capability is improved, but the characteristics of one-way data communication deteriorate

Engineering Contradiction:
Improveerror detection capabilityVSAvoidone-way communication characteristics
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent applies local quality by making the reverse connection have different characteristics from the main data connection. The reverse connection is configured specifically for error notification only, with different physical and protocol characteristics, allowing it to fulfill its specialized function without affecting the one-way data communication properties.

Inventive Principle:
Principle #3Local quality

Solution Approach 2:

The patent segments the communication system into two independent parts: the main data transmission path (one-way communication) and the error notification path (reverse connection). This segmentation allows each path to be optimized for its specific function, preserving the one-way communication characteristics while enabling reliable error detection.

Inventive Principle:
Principle #1Segmentation

3Productivity

If data is transmitted without encryption, then transmission speed is improved, but security is compromised

Engineering Contradiction:
Improvetransmission speedVSAvoidsecurity vulnerability
Core Design Contradiction:
ProductivityVSObject-affected harmful factors

Solution Approach 1:

The patent applies preliminary action by establishing encryption keys and security protocols in advance before data transmission begins. The transmission apparatus and reception apparatus pre-configure encryption parameters, allowing data to be encrypted and decrypted efficiently during transmission without adding significant delay, while still maintaining high security.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS10749903B2Transmission/reception apparatus of security gateway for physical unidirectional communication performing security tunneling and data re-transmission, and data transmission method using same
Publication Date: 2020.08.18 NNSP
  • US10749903B2 patent drawing
  • US10749903B2 patent drawing
  • US10749903B2 patent drawing

AI summary

The present invention provides a reception apparatus for performing security tunneling and data re-transmission and unidirectionally receiving data from a transmission apparatus and a transmission apparatus for unidirectionally transmitting data to the reception apparatus. When the reception apparatus checks that there is an error in received data, the reception apparatus performs a switching operation or transmits a switching request signal to the transmission apparatus to notify of the error of the received data to the transmission apparatus. When the transmission apparatus has detected the switching, the transmission apparatus re-transmits data, in which an error is generated, to the reception apparatus. The transmission apparatus encrypts the data and transmits the encrypted data to the reception apparatus. According to the present invention, reliability and security of one-unidirectional data communication are improved.