Method and apparatus for repercussion-free unidirectional transfer of data to a remote application server

1. A method for repercussion-free unidirectional transfer of data from a first network zone to a second network zone for evaluation in a remote application server, the method comprising:

capturing the data, which is transferred in a network data format, in the first network zone;

transforming the data from the network data format into a transport data format;

unidirectionally transferring the data in the transport data format to the second network zone;

transforming the data from the transport data format back into the network data format; and

transmitting the data to the remote application server,

wherein the transforming back is formed in a second network zone that is physically remote from the first network zone;

wherein information pertaining to a network protocol used for transferring the network data in the first network zone is introduced into the transport data format.

2. The method as claimed in claim 1 , wherein the transforming of the network data from the network data format into the transport data format involves a protocol format conversion from the network protocol into a transport protocol used for transferring the network data to the second network zone being performed, wherein the network protocol allows a bidirectional communication and the transport protocol allows only a unidirectional communication.

3. The method as claimed in claim 1 , wherein the transforming involves the data being redundantly coded and/or error recognition codes being added to the data.

4. The method as claimed in claim 1 , wherein the data are cryptographically protected during the transforming by adding a cryptographic checksum and/or encrypting the data.

5. The method as claimed in claim 1 , wherein a cryptographically secure communication connection is used for transferring the data in the transport data format in the second network zone.

6. The method as claimed in claim 1 , wherein the first network zone is a first network having high security requirements and the second network zone is a second network having low security requirements.

7. A transfer apparatus for repercussion-free unidirectional transfer of data from a first network zone to a second network zone for evaluation in a remote application server, comprising:

a data export device, which is arranged in the first network zone and which is configured to capture the data transferred in a network data format in the first network zone, and to transform the data from the network data format into a transport data format,

a unidirectional data transfer unit, which is configured to unidirectionally transfer the data in the transport data format to the second network zone,

a data import device, which is configured to transform the data from the transport data format back into the network data format, and to transmit the data to the remote application server, wherein the data import device and the remote application server are arranged in a second network zone that is physically remote from the first network zone;

wherein information pertaining to a network protocol used for transferring the network data in the first network zone is introduced into the transport data format.

8. The apparatus as claimed in claim 7 , wherein the apparatus is configured to carry out the method.

9. The apparatus as claimed in claim 7 , wherein the data import device is configured to perform at least one further transformation of the data from the network data format into a further data format.

10. The apparatus as claimed in claim 7 , wherein the data import device is a part of the remote application server.

11. The apparatus as claimed in claim 7 , wherein the data export device has a memory unit for persistently storing the data in the first network zone.

12. The apparatus as claimed in claim 7 , wherein a network tap, a mirroring port of a network switch or a data diode is usable as the unidirectional data transfer unit.

13. The apparatus as claimed in claim 7 , comprising a data gateway configured to set up a cryptographically secure communication connection for transferring the data in the transport data format, to the data import device.

14. A computer program product, comprising a non-transitory computer readable hardware storage device having computer readable program code stored therein, said program code executable by a processor of a computer system to implement a method for repercussion-free unidirectional transfer of data from a first network zone to a second network zone for evaluation in a remote application server, the method comprising

capturing the data, which is transferred in a network data format, in the first network zone;

transforming the data from the network data format into a transport data format;

unidirectionally transferring the data in the transport data format to the second network zone;

transforming the data from the transport data format back into the network data format; and

transmitting the data to the remote application server,

wherein the transforming back is formed in a second network zone that is physically remote from the first network zone;

wherein information pertaining to a network protocol used for transferring the network data in the first network zone is introduced into the transport data format.