Method for providing high-availability services on one-way data diode

A system for providing high-availability services across a one-way data diode, the method comprising providing:

• a first network having a first node and a first security rating;
• a second network having a second node and a second security rating;
• a first data channel comprising a first one-way data diode connecting the first node to the second node, wherein the first one-way data diode comprises a first low side and a first high side and is configured to enable message traffic to proceed from the first node to the second node, and not in the reverse direction;
• a second data channel comprising a second one-way data diode connecting the first node to the second node, wherein the second one-way data diode comprises a second low side and a second high side and is configured to enable message traffic to proceed from the first node to the second node, and not in the reverse direction;
• a system heartbeat shared by the first high side and the second high side, comprising a periodic signal that is sent between the first high side and the second high side at regular intervals;
• a timing channel, connecting the respective high sides of the first and second data diodes, configured by code to measure an interval of time that a loss of the system heartbeat persists and compare the interval to a preset failover determination time Tfailover;
• a status check module configured by code to determine whether the second data channel is receiving packets of data from the first network, and further configured to repeat the determination after a preset interval of time Tretry if the second channel is not receiving traffic;
• and
• a failover to the second data channel if all of the following conditions are met:
• the heartbeat becomes undetectable;
• the interval of time measured by the timing channel reaches Tfailover, and
• the second data channel is still receiving data packets.