System for secure transfer of information from an industrial control system network

A system for securely transferring information from a first network positioned within a secure domain, comprising:

• one or more remote terminal units within the secure domain;
• a first network within the secure domain coupling the one or more remote terminal units;
• one or more client computers within the secure domain;
• a second network within the secure domain coupling the one or more client computers;
• a send server within the secure domain and directly coupled to the first network and to the second network, the send server having an output and configured to act as a proxy for communications between at least one of the one or more client computers and at least one of the one or more remote terminal units, to store information provided by the at least one of the one or more remote terminal units, and to transmit the stored information on the output;
• a receive server outside the secure domain having an input coupled to the output of the send server only via a one-way data link which allows communication only from the send server to the receive server and which prevents any communication from the receive server to the send server, the receive server configured to receive and store the information provided via the input, the receive server coupled to the send server only via the one-way data link;
• a third network outside the secure domain coupled to the receive server;
• one or more client computers outside the secure domain coupled to the third network;
• and wherein the receive server is configured to provide at least part of the stored information in response to a request from one of the one or more client computers via the third network and wherein at least one of the remote terminal units is a MODBUS device.

A system for securely transferring information from a first network positioned within a secure domain, comprising:

• one or more remote terminal units within the secure domain;
• a first network within the secure domain coupling the one or more remote terminal units;
• a send server within the secure domain and directly coupled to the first network, the send server having an output and configured to transmit a poll request based on information stored in the send server to at least one of the one or more remote terminal units via the first network, to read information supplied on the first network in response to the poll request, and to transmit the read information on the output;
• a receive server outside the secure domain having an input coupled to the output of the send server only via a one-way data link which allows communication only from the send server to the receive server and which prevents any communication from the receive server to the send server, the receive server configured to receive and store the information provided via the input, the receive server coupled to the send server only via the one-way data link;
• a second network outside the secure domain coupled to the receive server;
• one or more client computers outside the secure domain coupled to the second network;
• and
• wherein the receive server is configured to provide at least part of the stored information in response to a request from one of the one or more client computers via the second network and
• wherein at least one of the remote terminal units is a MODBUS device.