TWI771523B - System and method for unidirectional transfer of file - Google Patents

Abstract

A system for unidirectional transfer of files between a sender network and a receiver network is provided. The system includes a data diode configured to provide a one-way link between the sender network and the receiver network. The data diode includes a data diode sender and a data diode receiver wherein the data diode receiver is communicably coupled to the data diode sender for unidirectional transfer of files from the data diode sender to the data diode receiver. Each file is identified using a file identifier. The data diode sender is configured to send a file list to the data diode receiver. The file list includes file identifiers of all the files to be sent through the data diode. The data diode receiver is configured to detect a loss of one or more files based on comparing the file identifiers of received files with the file identifiers present in the file list.

Description

System and method for one-way file transfer

This disclosure is about a one-way file transfer system. More specifically, the present disclosure relates to detecting file loss in a one-way file transfer system.

One-way file transfer systems are often used to mitigate the security risks of connecting two different networks. In one embodiment, unidirectional transfers are implemented on the physical layer using data diodes. Allowing files to be transferred in only one direction provides network security to the network by isolating the network from potential security breaches (eg, unwanted and unauthorized data flowing out of the network), while still allowing the network Road enables the transfer of files in a controlled manner. Typically, the file to be transferred is sent from a data diode transmitter in the transmitter network to a data diode receiver in the receiver network. File loss scenarios can occur during file transfer. For example, file loss can occur when a data diode receiver cannot keep up with files from a data diode transmitter.

Since there is no feedback loop in a one-way file transfer system, the data diode transmitter is unaware of file loss. Therefore, users of a one-way file transfer system will not be aware of file loss (if any) unless it has been physically verified that all files are in the Data is successfully received at the diode receiver. Most of the known solutions to the problem of file loss include a feedback mechanism to notify the data diode transmitter or some other component in the transmitter network that the file is lost. In addition, corrective actions such as initiating retransmission of lost files also use a feedback mechanism. An example of file loss detection and repair using a feedback mechanism is disclosed in US Pat. No. 9,264,470.

Therefore, there is a need for a one-way file transfer system designed to detect file loss in a fast and simple manner.

In an aspect of the present invention, a system for unidirectionally transferring files between a sender network and a receiver network is provided. The system includes data diodes configured to provide a unidirectional link between a network of transmitters and a network of receivers.

The data diode includes a data diode transmitter and a data diode receiver. The data diode receiver is communicatively coupled to the data diode transmitter for unidirectional transfer of files from the data diode transmitter to the data diode receiver. Each file is identified by a file identifier such as a file name or a file number.

The data diode transmitter is further configured to transmit a file list to the data diode receiver. The file list includes file identifiers for all files to be sent via the data diode. The data diode receiver is configured based on comparing the file identifier of the received file with all the files present in the file list. The file identifiers are compared to detect the loss of one or more files.

In aspects of the invention, the data diode transmitter is configured to repeatedly transmit the profile list to the data diode receiver. For example, the data diode transmitter may send the file list a predetermined number of times. Alternatively, the data diode transmitter may periodically send the file list to the data diode receiver.

In aspects of the present invention, upon detecting the loss of the one or more files, the data diode receiver is configured to generate the file containing the missing one or more files The log of identifiers (log).

In another aspect of the invention, upon detecting the loss of the one or more files, the data diode receiver is configured to generate a message indicating the loss of the one or more files Alert message. The alert message includes the file identifier for the one or more files lost during transfer of files from the data diode transmitter to the data diode receiver. The alert message is delivered to a user device or monitoring unit communicatively coupled to the data diode using Simple Mail Transfer Protocol (SMTP) or Syslog.

In another aspect of the present invention, the alert message is used to trigger response to the one or more files lost during transfer of files from the data diode transmitter to the data diode receiver Retransmission of files. The retransmission of the one or more files is triggered using the file identifier of the one or more files.

Other features and aspects of the present invention will become apparent in conjunction with the following description and accompanying drawings easy to see.

100: One-way file transfer system

102: Data Diode

104: Transmitter Network

106: Receiver Network

108: Network Traffic Sources

110: Network traffic destination

202: Data Diode Transmitter

204: Data Diode Receiver

302: File List

400: Method

402, 404, 406: Steps

1 is a schematic diagram of a one-way file transfer system for one-way transfer of data from a sender network to a receiver network, according to an embodiment of the present invention.

Figure 2 is a schematic representation of the components of a one-way archive transfer system according to an embodiment of the present invention.

3 is an example of a file list sent from a data diode transmitter according to an embodiment of the present invention.

4 is a schematic flow diagram of a method for unidirectional transfer of files from a sender network to a receiver network, according to an embodiment of the present invention.

Wherever possible, the same reference numbers will be used throughout the figures to refer to the same or like parts. Furthermore, references described herein to various elements are made collectively or individually when there may be more than one element of the same type. However, such references are merely exemplary in nature. It is noted that, unless expressly stated in the appended claims, any reference to an element in the singular may also be construed as referring to the plural and vice versa, without limiting the scope of the invention to the exact number or type of such elements.

FIG. 1 schematically illustrates an example of a one-way file transfer system 100 including a data diode 102, according to one embodiment of the present invention. For example, it is Communication is provided between transmitter network 104 and receiver network 106, although additional networks are also contemplated. The sender network 104 may include one or more network traffic sources 108 . The receiver network 106 may include one or more web traffic destinations 110 . Data diode 102 is configured to enable transfer of files between sender network 104 and receiver network 106 in a unidirectional manner. Specifically, data diode 102 is configured to enable transfer of files from sender network 104 to receiver network 106 and to prevent transfer of files from receiver network 106 to sender network 104 . Thus, data diode 102 acts as a transparent router that allows one-way transfer of files without modification of the data passing through it. Although the data diode 102 is shown in FIG. 1 as being external to the transmitter network 104 and the receiver network 106, one or more components of the data diode 102 may be provided on the transmitter network 104 and the receiver network 106. and/or in the receiver network 106 .

In one embodiment, files may contain various types of content, such as documents, images, web pages, graphics, video, audio, programs, and/or other formats. Although the invention has been explained using files, the invention is equally applicable to other types of digital information or digital data known in the art.

Figure 2 schematically illustrates exemplary components of a one-way archive transfer system 100 according to one embodiment of the present invention. The data diode 102 includes a data diode transmitter 202 and a data diode receiver 204 . The data diode transmitter 202 is connected to the data diode receiver 204 by a unidirectional optical data link. This configuration physically implements a unidirectional data transfer at both ends of the optical fiber connecting the data diode transmitter 202 to the data diode receiver 204 , thereby generating a data transfer from the transmitter network 104 to the receiver network 106 A true one-way data link.

Data diode transmitter 202 is configured to transmit a plurality of files to data diode receiver 204 . In some scenarios, there may be some loss of files during the transfer from the data diode transmitter 202 to the data diode receiver 204 . For example, the data diode receiver 204 may not be able to keep up with the inflow of files from the data diode transmitter 202 . To address this scenario, the data diode sender 202 is configured to send a file list that includes information about all files to be sent via the data diode 102 . The file list may include one or more file identifiers, such as file name, file ID, timestamp, and the like. FIG. 3 shows an example of a file list 302 that includes information for 50 files to be transmitted via the data diode 102 . The file list 302 includes file names and file numbers as file identifiers.

In one embodiment, the data diode sender 202 is configured to compile a file list of files as each file is sent from the data diode sender 202 . The compilation of the dossier list contains a history of all dossiers sent from the data diode transmitter 202 or a compilation of dossiers sent over a period of time.

In some cases, the file list may be lost in the transition between the data diode transmitter 202 and the data diode receiver 204 . To address this concern, the data diode transmitter 202 may be configured to repeatedly transmit the dossier list to the data diode receiver 204 . In one embodiment, the data diode transmitter 202 is configured to transmit the file list a predetermined number of times. In another embodiment, the data diode transmitter 202 is configured to periodically transmit the profile list to the data diode receiver 204 .

Data diode receiver 204 is configured to receive files sent by data diode transmitter 202 . The data diode receiver 204 may be configured to extract the received The file identifier of the received file. Data diode receiver 204 is also configured to receive a file list including file identifiers for all files to be transferred via data diode 102 . After the file transfer is completed, the data diode receiver 204 is configured to detect whether there is a loss of one or more files. Specifically, the data diode receiver 204 is configured to use the received file list to compare the file identifier of the received file with the file identifiers present in the file list.

If some files are lost during transfer between the data diode transmitter 202 and the data diode receiver 204, the data diode receiver 204 will be able to identify the lost files based on a comparison of the file identifiers. In other words, the missing files can be identified as files whose file identifiers are present in the file list but not received at the data diode receiver 204 .

In one embodiment, the data diode receiver 204 is configured to generate a log containing missing information about one or more files. The log may include file identifiers for files not received at the data diode receiver 204 but listed in the file list. Optionally, the log may include time and date information and information related to missing files.

In various embodiments, the data diode receiver 204 is configured to generate an alert message indicating the loss of one or more files. The alert message may be an email, text message, or any other alert message known in the art. The alert message may include file identifiers for one or more files that were lost during the transfer of files from the data diode transmitter 202 to the data diode receiver 204 . The alarm message may be communicated to a user device or a remote monitoring unit communicatively coupled to the data diode 102 . Alert messages may be delivered using Simple Mail Transfer Protocol (SMTP) or syslog or other alert protocols known in the art.

The alert message may be used to trigger the retransmission of one or more files that were lost during the transfer of files from the data diode transmitter 202 to the data diode receiver 204 . The retransmission of the lost file may be triggered using the file identifier of the lost file.

The various embodiments disclosed herein are to be understood in an illustrative and explanatory sense and should in no way be construed as limiting the scope of the invention. In addition, all numerical terms (such as, but not limited to, "primary," "secondary," "first," "second," "third," or any other common and/or numerical terms) shall also be used only by are understood as identifiers to assist the reader in understanding various elements, embodiments, variations and/or modifications of the invention, and may not create any limitations, especially with respect to or in comparison to any one element, embodiment, variation and/or modification An element, embodiment, variation and/or modification order or preferred limitation.

It should be understood that individual features shown or described for one embodiment can be combined with individual features shown or described for another embodiment. The above-described embodiments do not limit the scope of the present invention in any way. It is therefore to be understood that although some features have been shown or described in the context of functional components to illustrate the use of the invention, the invention may be The scope of the invention omits such features.

Industrial Applicability

Embodiments of the present invention are directed to detecting files in the one-way file transfer system 100 Applicability in the use and implementation of case loss. The data diode 102 of the present invention is provided with a file list which can be advantageously used to detect the loss of files during the transfer of files from the data diode transmitter 202 to the data diode receiver 204 . Furthermore, by utilizing the embodiments disclosed herein, it will be easier and faster to detect file loss and further identify the file for retransmission, as compared to conventional solutions for detecting file loss in a one-way file transfer system.

FIG. 4 illustrates a method 400 of detecting the loss of one or more files during unidirectional transfer of files from sender network 104 to receiver network 106 . At step 402, a file list is received by the data diode receiver 204. The file list includes file identifiers for all files to be sent via data diode 102 . At step 404 , the file sent by the data diode transmitter 202 is received by the data diode receiver 204 . Data diode receiver 204 is configured to extract file identifiers for all files received by data diode receiver 204 .

At step 406 , the data diode receiver 204 is configured to detect the loss of one or more files during the transfer of files from the data diode transmitter 202 to the data diode receiver 204 . The detection is performed based on comparing the file identifier of the received file with the file identifier present in the file list. Therefore, using the one-way file transfer system 100 disclosed herein can save the time, cost, and effort that would normally be incurred in manually detecting file loss or utilizing other file loss detection techniques conventionally known in the art.

While aspects of the invention have been specifically shown and described with reference to the above embodiments, those skilled in the art will understand that Various additional embodiments can be envisaged by modifying the disclosed machines, systems, and methods, subject to circumstances. Such embodiments should be understood to fall within the scope of the invention as determined based on the claimed scope and any equivalents thereof.

100: One-way file transfer system

102: Data Diode

104: Transmitter Network

106: Receiver Network

108: Network Traffic Sources

110: Network traffic destination

Claims (18)

A unidirectional data network system for unidirectional transfer of files from a sender network to a receiver network, the system comprising: a data diode configured to communicate between the sender network and all A unidirectional data network system providing a unidirectional link between the receiver networks to unidirectionally transfer files from the sender network to the receiver network, the data diodes comprising : a data diode transmitter; and a data diode receiver communicatively coupled to the data diode transmitter for unidirectional transfer of files from the data diode transmitter to the data diode receiver, wherein each file is identified using a file identifier; wherein the data diode transmitter is configured to send a list of files to the data diode receiver, the The file list includes file identifiers for all files to be sent via the data diode, and the data diode receiver is configured to be based on comparing the file identifiers of the received files with those present in the file list The file identifiers in are compared to detect the loss of one or more files, and the data diode transmitter is further configured to send the file list to the data diode receiver a predetermined number of times. The system of claim 1, wherein the data diode transmitter is configured to periodically transmit the profile list to the data diode receiver. The system of claim 1, wherein the file identification The character is at least one of a file name and a file number. The system of claim 1, wherein the data diode receiver is further configured to generate the one or more files containing the loss upon detecting the loss of the one or more files of the file identifier of the log. The system of claim 1, wherein the data diode receiver is further configured to generate all data indicative of the one or more files upon detecting the loss of the one or more files the missing alert message. The system of claim 5, wherein the alert message includes the one or more files lost during transfer of files from the data diode transmitter to the data diode receiver The file identifier of . The system of claim 5, wherein the alert message is delivered to a user device or monitoring unit communicatively coupled to the data diode using a Simple Mail Transfer Protocol or a syslog. The system of claim 5, wherein the alert message is used to trigger response to the one lost during transfer of a file from the data diode transmitter to the data diode receiver or retransmission of multiple files. The system of claim 8, wherein the retransmission of the missing one or more files is triggered using the file identifier of the missing one or more files. A method for unidirectional transfer of files from a transmitter network to a receiver network using data diodes, the data diodes comprising a data diode transmitter and a data diode receiver, the method comprising : A file list is received by the data diode receiver, the file list including file identifiers for all files to be sent via the data diode; the data diode transmitter receives the file; and the data diode receiver is based on comparing the file identifier of the received file with the file identifier present in the file list and detecting the loss of one or more files, wherein receiving the file list includes receiving the file list a predetermined number of times. The method of claim 10, wherein receiving the dossier list includes periodically receiving the dossier list. The method of claim 10, wherein the file identifier is at least one of a file name and a file number. The method of claim 10, further comprising generating a log containing the file identifiers of the one or more files lost when the loss of the one or more files is detected. The method of claim 10, further comprising generating an alert message indicating the loss of the one or more files when the loss of the one or more files is detected. The method of claim 14, wherein the alert message includes the one or more files lost during transfer of files from the data diode transmitter to the data diode receiver The file identifier of . The method of claim 14, wherein the alarm cancels The information is delivered to a user device or monitoring unit communicatively coupled to the data diode using a Simple Mail Transfer Protocol or a syslog. 14. The method of claim 14, wherein the alert message is used to trigger response to the one lost during the transfer of a file from the data diode transmitter to the data diode receiver or retransmission of multiple files. The method of claim 17, wherein the retransmission of the lost one or more files is triggered using the file identifier of the lost one or more files.

Images