Secure one-way interface for archestra data transfer
View Patent ↗A system for transmitting ArchestrA information from a first network in a first security domain to a second network in a second security domain. A first stand-alone server within the first security domain retrieves information via the first network from a first ArchestrA Galaxy and/or from a first historian in the first security domain and forwards the retrieved information to a send server coupled to the first network. The send server forwards the received information received to a receive server via a one-way data link. The receive server receives the information from the send server and forwards the received information to a second stand-alone server via the second network. The second stand-alone server receives the information from the receive server and forwards the information to a second ArchestrA Galaxy and/or to a second historian in the second security domain.
1. A system for transmitting ArchestrA information from a first network in a first security domain to a second network in a second security domain, comprising:
a send server computer within the first security domain having an input coupled to the first network and an output, the send server computer configured to forward information received via the input on the output;
a one-way data link having an input within the first security domain coupled to the output of the send server computer and an output within the second security domain;
a receive server computer within the second security domain having an input coupled to the output of the one-way data link and an output coupled to the second network;
a first stand-alone server computer within the first security domain coupled to the first network and configured to retrieve information via the first network from a first ArchestrA Galaxy in the first security domain and/or from a first historian in the first security domain and to forward the retrieved information to the send server computer via the first network;
a second stand-alone server computer within the second security domain coupled to the second network;
wherein the receive server computer is configured to receive the information from the send server computer via the one-way data link and to forward the received information to the second stand-alone server computer via the second network;
wherein the second stand-alone server computer is configured to receive the information from the receive server computer and forward the information to a second ArchestrA Galaxy in the second security domain and/or to a second historian in the second security domain; and
wherein the one-way data link is configured to transfer data only from the send server computer to the receive server computer and to prevent any signal from passing from the receive server computer to the send server computer, and wherein the receive server computer is coupled to the send server computer only via the one-way data link.
2. The system of claim 1 , wherein the information retrieved by the first stand-alone server computer comprises live point values.
3. The system of claim 1 , wherein the information retrieved by the first stand-alone server computer comprises InSQL historical data records.
4. The system of claim 1 , wherein the information retrieved by the first stand-alone server computer comprises live point values and InSQL historical data records.
5. The system of claim 2 , wherein the first stand-alone server computer is user-configured to set a list of point and attribute names, and wherein the first stand-alone server computer is configured to retrieve only the live point values associated within the list of point and attribute names.
6. The system of claim 3 , wherein the first stand-alone server computer is user-configured to set a time range for the number of InSQL historical records to be retrieved, and wherein the first stand-alone server computer is configured to retrieve only the InSQL historical records within the set time range.
7. The system of claim 6 , wherein the first stand-alone server computer is user-configured to set a sub-range for the number of InSQL historical records to be retrieved, and wherein the first stand-alone server computer is configured to sequentially retrieve and forward a sub-portion of the InSQL historical records corresponding to the set sub-range until all of the InSQL historical records corresponding to the set time range are retrieved and forwarded.
8. The system of claim 7 , wherein the first stand-alone server computer is user-configured to set a delay time, and wherein each sequential retrieval and forwarding operation is followed by a delay corresponding to the set delay time.
9. The system of claim 4 , wherein the first stand-alone server computer is user-configured to set a time range and a sub-range for the number of InSQL historical records to be retrieved, wherein the first stand-alone server computer is configured to sequentially retrieve and forward a sub-portion of the InSQL historical records corresponding to the set sub-range until all of the InSQL historical records corresponding to the set time range are retrieved and forwarded, and wherein the first stand-alone server computer is configured to interleave live point values with each sequential retrieval and forwarding operation for the InSQL historical records.
10. The system of claim 3 , wherein the second stand-alone server computer is user configured compare an index of each received InSQL historical record with a list previously received InSQL historical records and to only forward the received InSQL historical records to the second historian that were not previously received.
11. A system for transmitting ArchestrA information from a first network in a first security domain to a second network in a second security domain, comprising:
a first server computer within the first security domain having an input coupled to the first network and an output, the first server computer configured to retrieve information via the first network from a first ArchestrA Galaxy in the first security domain and/or from a first historian in the first security domain and to forward the retrieved information on the output;
a one-way data link having an input within the first security domain coupled to the output of the first server computer and an output within the second security domain;
a second server computer within the second security domain having an input coupled to the output of the one-way data link and an output coupled to the second network, the second server computer configured to receive the information from the first server computer via the one-way data link and to forward the received information to a second ArchestrA Galaxy in the second security domain and/or to a second historian in the second security domain; and
wherein the one-way data link is configured to transfer data only from the first server computer to the second server computer and to prevent any signal from passing from the second server computer to the first server computer, and wherein the second server computer is coupled to the first server computer only via the one-way data link.
12. The system of claim 11 , wherein the information retrieved by the first server computer comprises live point values.
13. The system of claim 11 , wherein the information retrieved by the first server computer comprises InSQL historical data records.
14. The system of claim 11 , wherein the information retrieved by the first server computer comprises live point values and InSQL historical data records.
15. The system of claim 12 , wherein the first server computer is user-configured to set a list of point and attribute names, and wherein the first server computer is configured to retrieve only the live point values associated within the list of point and attribute names.
16. The system of claim 13 , wherein the first server computer is user-configured to set a time range for the number of InSQL historical records to be retrieved, and wherein the first server computer is configured to retrieve only the InSQL historical records within the set time range.
17. The system of claim 16 , wherein the first server computer is user-configured to set a sub-range for the number of InSQL historical records to be retrieved, and wherein the first server computer is configured to sequentially retrieve and forward a sub-portion of the InSQL historical records corresponding to the set sub-range until all of the InSQL historical records corresponding to the set time range are retrieved and forwarded.
18. The system of claim 17 , wherein the first server computer is user-configured to set a delay time, and wherein each sequential retrieval and forwarding operation is followed by a delay corresponding to the set delay time.
19. The system of claim 14 , wherein the first server computer is user-configured to set a time range and a sub-range for the number of InSQL historical records to be retrieved, wherein the first server computer is configured to sequentially retrieve and forward a sub-portion of the InSQL historical records corresponding to the set sub-range until all of the InSQL historical records corresponding to the set time range are retrieved and forwarded, and wherein the first server computer is configured to interleave live point values with each sequential retrieval and forwarding operation for the InSQL historical records.
20. The system of claim 13 , wherein the second server computer is user configured compare an index of each received InSQL historical record with a list previously received InSQL historical records and to only forward the received InSQL historical records to the second historian that were not previously received.