Reliable data transfer protocol for unidirectional network segments
AssigneeScience Applications International Corporation
InventorTravis Ferguson
Life of this patent
Estimating the term…
Abstract
A unidirectional transfer protocol allows data to be transmitted from a non-secure network into a secure network. A non-secure gateway may receive data and/or information, intended for the secure network, from one or more devices. The gateway may fragment the data and/or information into smaller chunks and transmit the chunks to a secure gateway via a unidirectional communication channel. The secure gateway may verify the chunks using one or more rules and reassemble the chunks when the data is validated. The reassembled data may be sent across a secure network enclave. The unidirectional transfer protocol may provide a hardware-agnostic solution for transmitting data over a unidirectional communication channel.
Claims20
A method comprising:
- receiving, by a second gateway from a first gateway via a unidirectional network segment, a start control message, wherein the start control message indicates a quorum agreement;
- receiving, by the second gateway from the first gateway via the unidirectional network segment and after the start control message, a first plurality of data packets;
- receiving, by the second gateway from the first gateway via the unidirectional network segment, a second plurality of data packets, wherein at least one of the second plurality of data packets is a duplicate of at least one of the first plurality of data packets;
- receiving, by the second gateway from the first gateway via the unidirectional network segment, an end control message;
- determining, by the second gateway, whether the second plurality of data packets comprises a predetermined number of duplicates of the first plurality of data packets to satisfy the quorum agreement;
- and
- reassembling, by the second gateway and based on a determination that the quorum agreement has been satisfied, the first plurality of data packets into a dataset.
A method comprising:
- sending, from a first gateway to a second gateway via a unidirectional network segment, a start control message, wherein the start control message indicates a quorum agreement indicating a number of duplicate packets to be received for a successful session;
- sending, from the first gateway to the second gateway via the unidirectional network segment and after the start control message, a first plurality of data packets;
- sending, from the first gateway to the second gateway via the unidirectional network segment, a second plurality of data packets, wherein at least one of the second plurality of data packets is a duplicate of at least one of the first plurality of data packets;
- and
- sending, from the first gateway to the second gateway via the unidirectional network segment and after sending the second plurality of data packets, an end control message.
A system comprising:
- a first gateway;
- a second gateway;
- and
- a unidirectional network segment connecting the first gateway and the second gateway;
- wherein the first gateway is configured to:
- send, to the second gateway via the unidirectional network segment, a start control message, wherein the start control message indicates a quorum agreement indicating a number of duplicate packets to be received for a successful session;
- send, to the second gateway via the unidirectional network segment and after the start control message, a first plurality of data packets;
- send, to the second gateway via the unidirectional network segment, a second plurality of data packets, wherein at least one of the second plurality of data packets is a duplicate of at least one of the first plurality of data packets;
- and
- send, to the second gateway via the unidirectional network segment and after sending the second plurality of data packets, an end control message;
- wherein the second gateway is configured to:
- receive the start control message;
- receive the first plurality of data packets;
- receive the second plurality of data packets;
- receive the end control message;
- determine whether the second plurality of data packets comprises a predetermined number of duplicates of the first plurality of data packets to satisfy the quorum agreement;
- and
- reassemble, based on a determination that the quorum agreement has been satisfied, the first plurality of data packets into a dataset.
Dependencies are inferred from the claim text.