TCP Packet Transfer System (TPTS)
Secure TCP Technology
Secure TCP Packet Transfer System (TPTS) provides a TCP application level protocol bridge across our patented, hardware based security to support one-way communications. Secure TPTS hardware uses custom device drivers for the communication cards and the low level Asynchronous Transfer Mode (ATM) communication protocol to support high-speed (155 Mbps) one-way transmission.
How it Works The Owl DualDiode® hardware provides a secure data transfer between two network servers that are not otherwise directly connected, either physically or logically. The transfer is one-way, significantly hardening the security of the communications link over conventional networks. The one-way transfer is physically enforced at both ends providing protection at both the source and destination of information flow. The source (or “send”) hardware is identified by Blue Owl logos. The destination (or “receive”) hardware is identified by Red Owl logos.
The TCP Packet Transfer System (TPTS) uses the TCP/IP (Transmission Control Protocol/Internet Protocol) as a user interface to our one-way system. TCP/IP is the basic communication protocol of the Internet. It can also be used as a communications protocol in a private network on either an intranet or an extranet. TCP/IP is a two-way protocol, however, our system strips off all headers and transfers only the payload across the one-way link. A TCP/IP client program connects to Owl’s BLUE machine—operating as a TCP/IP Server. The BLUE machine "accepts" the client’s socket connection request and all data transferred to the Blue machine is relayed or "proxied" over the DualDiode. The Owl RED machine operates as a TCP/IP client and requests a socket connection to the destination server.
All data relayed over the DualDiode is then transferred to the destination machine over a TCP/IP socket. Data integrity is assured by a running digest check sum associated with the data in the Owl headers on each data packet transferred. Closing the socket on the BLUE side will close the socket on the RED side. Any data transfer error identified by the Owl RED machine will close the socket connection on the RED side. In this way, only correct data is transferred to the destination machine. Any data sent from the destination machine to the RED machine is blocked and discarded since our hardware moves the payload in a unidirectional manner.
|