IP Library › Granted Patent US 10,387,351
Granted Patent B2
US 10,387,351 · App. 16/224,694 · Granted Aug 20, 2019

One-way data transfer device with onboard system detection

Inventors: Colin Patrick Dunn (Falls Church, VA); Sang Cheon Lee (Ashburn, VA)
Assignee: Fend, Inc.
G06F13/4027G06F21/606G06F21/86H04L63/0428
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,387,351
App. No.
16/224,694
Granted
Aug 20, 2019
Kind
B2
Abstract

A data diode provides a flexible device for collecting data from a data source and transmitting the data to a data destination using one-way data transmission. On-board processing elements allow the data diode to identify automatically the type of connectivity provided to the data diode and configure the data diode to handle the identified type of connectivity.

Claims (41)

1. A data diode, comprising:

a first network interface circuitry comprising:

a first processing element;

a first network connector, coupled to the first processing element; and

a second network interface circuitry, comprising:

a second processing element; and

a second network connector, coupled to the second processing element;

a single one-way data bridge coupled between the first processing element and the second processing element that allows data flow from the first processing element to the second processing element and physically prohibits data flow from the second processing element to the first processing element;

a first firmware comprising instructions that when executed cause the first processing element to:

automatically determine that a first protocol of a first predetermined plurality of protocols is used for communications via the first network connector; and

configure the first processing element to receive data using the first protocol and transmit the data across the one-way data bridge to the second processing element responsive to the determination; and

a second firmware comprising instructions that when executed cause the second processing element to:

automatically determine that a second protocol of a second predetermined plurality of protocols is used for communications via the second network connector; and

configure the second processing element to transmit data received across the one-way data bridge by the second processing element using the second protocol, responsive to the determination,

wherein the first protocol is different from the second protocol.

2. The data diode of claim 1 , wherein the one-way data bridge is an optocoupler.

3. The data diode of claim 1 , wherein the one-way data bridge is an infrared device.

4. The data diode of claim 1 , wherein the one-way data bridge is an acoustical device.

5. The data diode of claim 1 , further comprising:

a tamper-resistant housing in which is disposed the first network interface circuitry, the second network interface circuity, the one-way data bridge, the first firmware, and the second firmware.

6. The data diode of claim 5 , wherein the tamper-resistant housing comprises a transparent window allowing external viewing of the interior of the tamper-resistant housing.

7. The data diode of claim 1 ,

wherein the first network interface circuitry comprises a plurality of different network connectors, each coupled to the first processing element, and

wherein the first firmware further comprises instructions that when executed cause the first processing element to identify which of the plurality of different network connectors provides data received by the first processing element and configures the first processing element responsive to the identification.

8. The data diode of claim 1 , wherein the first network connector comprises a local area network connector.

9. The data diode of claim 1 , wherein the first network connector comprises a point-to-point serial connector.

10. The data diode of claim 1 , wherein the first network connector is of a different type than the second network connector.

11. The data diode of claim 1 ,

wherein the second network interface circuitry comprises a plurality of different network connectors, each coupled to the second processing element, and

wherein the second firmware further comprises instructions that when executed cause the second processing element to identify which of the plurality of different network connectors provides data received by the second processing element and configures the second processing element responsive to the identification.

12. The data diode of claim 1 ,

wherein the first network interface circuitry further comprises a first power connector, coupled to the first processing element for providing power to the first processing element, and

wherein the second network interface circuitry further comprises a second power connector, coupled to the second processing element for providing power to the second processing element.

13. The data diode of claim 1 , wherein the first network interface circuitry and the second network interface circuitry are separately grounded.

14. The data diode of claim 1 , wherein the instructions that when executed cause the first processing element to automatically determine which of a predetermined plurality of protocols is used for communications via the first network connector comprise instructions that when executed cause the first processing element to sequence between a predefined set of pre-loaded control protocols.

15. The data diode of claim 1 , wherein the instructions that when executed cause the second processing element to automatically determine which of a predetermined plurality of protocols is used for communications via the second network connector comprise instructions that when executed cause the second processing element to sequence between a predefined set of pre-loaded control protocols.

16. The data diode of claim 1 , wherein the first firmware further comprises instructions that when executed cause the first processing element to encrypt data received via the first network connector.

17. The data diode of claim 1 , wherein the second firmware further comprises instructions that when executed cause the second processing element to encrypt data transmitted via the second network connector.

18. The data diode of claim 1 , wherein the first firmware comprises instructions to collect data via the first network connector and report the data at a pre-determined interval.

19. The data diode of claim 1 , wherein the first firmware comprises instructions to collect data via the first network connector and report the data upon a change in the collected data.

20. The data diode of claim 1 , wherein the data diode is not configurable on-site.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 16, 2024
From: FEND INCORPORATED
To: OPSWAT INC.
Reel/Frame 069600/0302 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 18, 2018
From: DUNN, COLIN PATRICK; LEE, SANG CHEON
To: FEND INCORPORATED
Reel/Frame 047811/0693 →
Continuity (2)
Provisional Application 62609892 · Dec 22, 2017
Related Publication 20190197002A1 · Jun 27, 2019