KR102361079B1 - One-way security data transmission device and its software management system - Google Patents

Abstract

A software management system of a one-way security data transmission device manages software of a one-way data transmission device which transmits security data from a secure area to a non-secure area. The system comprises: a security policy setting unit for providing a screen UI to set and add a security policy for the security area, or to select and modify or delete one of the at least one pre-input security policy; a security policy display unit for outputting a list of security policies set in the security policy setting unit together on the screen UI; a packet log display unit for outputting a log for packets allowed or blocked according to the set security policy on the screen UI; and a one-way protocol setting unit for providing the screen UI so that the security policy setting unit can set a protocol to allow one-way transmission. The present invention can safely transmit the security data between heterogeneous systems.

Description

One-way security data transmission device and its software management system

The present invention relates to a one-way security data transmission device and a software management system thereof, and more particularly, monitoring vibrations generated during operation of control facilities in real time in industrial fields such as national security facilities, defense facilities, process plants and smart factories. It relates to a one-way security data transmission device and its software management system that can safely transmit vibration data of a control facility from a secure area to a non-secure area so that failures and conditions can be predicted.

In general, Internet of Things (IoT) technology is currently being applied in various industrial fields, and is being developed as a core technology in the fourth industrial revolution.

With the development of IoT, awareness and importance of IoT security are increasing, and in the case of smart factories and national security facilities, data in the security area (internal network) is transferred to the non-security area ( It is time to collect various data by introducing a network data transmission solution that transmits data to an external network.

However, since the conventional inter-network data transmission solution is configured in a way that only the protocol type transmits data in the transmission area and the reception area, there is a security vulnerability in that data can be transmitted through forgery or modulation of the packet of the corresponding protocol. In addition, there is a problem in that data collection is limited due to the non-standardized development vendor's proprietary protocol-based heterogeneous system, and is always exposed to external cyberattacks due to the weak protection of the data.

In addition, existing manganese data transmission products do not provide a heterogeneous system communication interface function for various communication protocols, so it is necessary to install a separate software system for data acquisition.

In addition, the existing manganese data transmission system can set security policies only for protocols already built into the product. there is a problem.

Among the existing manganese data transmission products, a one-way communication device has been developed that provides not only a software method but also a specially designed hardware device to transmit data only from the secure area to the non-secure area by a physical method. In order to use a hardware device to process more data or to upgrade hardware specifications to apply a stronger security algorithm, there is a problem in that all hardware devices must be redesigned and manufactured.

In addition, in the case of conventional products, since most of the server hardware is designed to have a depth of 40 cm or more, a rack rail kit is additionally required to mount it on a rack to use the general-purpose product of the server vendor, and transport for server installation or relocation, etc. It incurs a lot of cost when doing

In addition, in the case of conventional products, there is a problem in that the cable life is reduced because a part of the eight lines constituting the UTP cable, which is a communication cable used in the one-way communication section, is short-circuited by the administrator by hand and is used by unidirectional processing.

In addition, when the installed unidirectional UTP cable is replaced with a general product, two-way communication is possible and there is a problem in that one-way communication is lost.

In order to solve this problem, there are products in which circuits are made so that only data transmission (TX) or only data reception (RX) is possible. have.

In addition, among conventional products, there are cases in which a cooling device to relieve heat of parts inside the server device is not installed for reasons such as cost reduction or lack of miniaturization technology. Problems such as data processing performance degradation are highly likely to occur.

Meanwhile, institutions in charge of smart factories and national security facilities computerize the operation and operation of control facilities in a distributed control device called DCS (Distributed Control System) to control and operate them. Since the failure of such a distributed control device can be fatal to the system, failures and abnormalities are predicted by monitoring the vibration data generated when the distributed control device is driven.

For example, in the prior art, vibration data was acquired in TCP/IP format through a communication interface to the DSC device. is changing to That is, a unidirectional data transmission system for transmitting data from a secure area equipped with DCS to a non-secure area equipped with a monitoring device is used.

However, the one-way communication technology cannot completely escape from the security threat due to the above-mentioned problems, and there is a problem in that it is difficult to manage. Therefore, there is a need for a system capable of managing after building security software to solve this problem.

Registered Patent Publication No. 10-1931683 (Notice on Dec.41, 2018)

The object of the present invention is to block access of unauthorized users, protocols and packets when transmitting security data from a security area to a non-security area in industrial fields such as national security facilities, defense facilities, process plants and smart factories to secure data It is to provide a one-way secure data transmission device capable of protecting against cyber attacks and intrusion prevention against cyber attacks, and a software management system thereof.

The software management system of the one-way secure data transmission device according to the present invention for achieving the above object is software management of the one-way secure data transmission device for managing the software of the one-way data transmission device that transmits secure data from a secure area to a non-secure area A system, comprising: a security policy setting unit providing a screen UI to set and add a security policy for the security area, or to select and modify or delete one of at least one entered security policy; a security policy display unit for outputting a list of security policies set in the security policy setting unit together on the screen UI; a packet log display unit for outputting a log for packets allowed or blocked according to the set security policy on the screen UI; and a one-way protocol setting unit that provides a screen UI so that the security policy setting unit can set a protocol to allow one-way transmission.

In addition, when a packet not permitted by the security policy display unit is transmitted to the non-security area, it may include a warning signal transmission unit for transmitting a warning signal to an external management server.

In addition, the security data may include vibration data generated during operation of mechanical facilities provided in public institutions.

In addition, the one-way protocol setting unit may be provided to input information about a protocol to allow one-way transmission from the secure area to the non-secure area.

Also, the unidirectional protocol setting unit may be configured to add, modify, and delete packets for a protocol to be used as a protocol to allow the unidirectional transmission.

A one-way secure data transmission device according to the present invention is a one-way secure data transmission device in which software is installed, and includes the security policy setting unit, the security policy display unit, the packet log display unit, and the one-way protocol setting unit. wealth; a switch connected to the TX of the transmitting server located in the secure area and the RX of the receiving server located in the non-secure area, and selecting to allow transmission of secure data from the TX to RX or from the RX to TX; a PCB board on which the software storage unit and the switch are installed; at least one cooling member for cooling the heat generated from the PCB substrate; and a case in which the PCB substrate and the cooling member are installed.

In addition, a LAN card disposed on one side of the PCB board and operated in TX mode or RX mode according to the selection of the switch to transmit the security data from the sending server to the receiving server, or from the receiving server to the sending server may further include.

In addition, it is disposed on the other side of the PCB substrate and may further include a redundant power supply for supplying power to the PCB substrate and the cooling member.
In addition, in the software management system of the unidirectional secure data transmission device for managing the software of the unidirectional data transmission device for transmitting secure data from the secure area to the non-secure area,
a security policy setting unit providing a screen UI to set and add a security policy for the security area, or to select and modify or delete one of at least one entered security policy; a security policy display unit for outputting a list of security policies set in the security policy setting unit together on the screen UI; a packet log display unit for outputting a log for packets allowed or blocked according to the set security policy on the screen UI; and a one-way protocol setting unit that provides a screen UI so that the security policy setting unit can set a protocol to allow one-way transmission; Including, wherein the receiving server located in the non-security area receives the security data after checking whether the security data is data transmitted from the transmission server in the secure area, and whether it is not forged or forged data It may include a software management system of the unidirectional secure data transmission device.

According to the present invention, since the administrator can configure the security policy for the communication interface section between the secure area and the non-secure area, and provides a record of network packets allowed or blocked according to the set security policy, it is safe between heterogeneous systems. Secure data can be transmitted.

In addition, as the administrator sets a security policy for network packets to be transmitted from the secure area to the non-secure area and provides only allowed packets to transmit secure data, the cyber security of the one-way secure communication interface can be strengthened.

In addition, when it is detected that packets that are not allowed by the administrator's security policy setting are transmitted to the non-security area, the administrator can take immediate action by sending a warning signal to the administrator through e-mail sending or the like.

In addition, since a system for acquiring heterogeneous communication interface data is basically built-in, different types of communication interface data can be unidirectionally linked without the need for installing a separate software system.

In addition, the security area can be safely protected from external cyberattacks at all times by unidirectionally transmitting data from the secure area to the non-security area and blocking all data transmitted from the non-security area to the secure area.

In addition, the packet transmitted from the secure area to the non-secure area is encrypted and transmitted using a verified encryption algorithm, and integrity is checked in the process of decrypting the packet to block data leakage due to forgery or falsification.

In addition, by providing a hardware device capable of installing the software storage unit, only one-way transmission from the secure area to the non-secure area may be physically possible.

In addition, when more data processing is required or a hardware specification upgrade is required to use a stronger security algorithm, high-performance parts are easily available on the market, and only those parts need to be replaced, enabling efficient hardware specification upgrade.

In addition, in order to support new protocols by managing metadata for protocols that can compose security policies as separate metadata files rather than supporting them as source codes in the program, only metadata files are added without modifying the source code. Therefore, it is possible to fundamentally block the possibility of defects and the occurrence of additional time required due to source code modification.

In addition, by mounting a switch that can select TX mode and RX mode on the PCB board, one hardware device enables one-way communication in the forward or reverse direction by corresponding to the sending server and the receiving server, respectively. Since it is provided by the internal circuit instead of the cable, human error due to cable replacement can be prevented.

In addition, as the first cooling fan for cooling the CPU and the second cooling fan for cooling the components other than the CPU are installed inside the hardware, the lifespan is reduced due to heat generation and security data processing even in an environment that operates 24 hours a day, 365 days a year performance degradation can be prevented.

1 is a block diagram illustrating the configuration of a software management system of a one-way secure data transmission apparatus according to an embodiment of the present invention.
FIG. 2 is a diagram illustrating a screen UI of the security policy setting unit and the security policy display unit shown in FIG. 1 .
FIG. 3 is a diagram illustrating a screen UI of the packet log display unit shown in FIG. 1 .
FIG. 4 is a diagram illustrating a screen UI of the one-way protocol setting unit shown in FIG. 1 .
5 is a block diagram illustrating an example of using a software management system of a one-way secure data transmission apparatus according to an embodiment of the present invention.
6 is a block diagram schematically illustrating the configuration of a one-way secure data transmission apparatus according to an embodiment of the present invention.
7 is a cross-sectional view schematically illustrating the configuration of the one-way secure data transmission apparatus shown in FIG. 6 .
8 is a block diagram schematically illustrating a method of transmitting secure data from a transmitting server located in a secure area to a receiving server located in a non-secure area using a one-way secure data transmission apparatus according to an embodiment of the present invention.

Hereinafter, a one-way secure data transmission apparatus and a software management system thereof according to a preferred embodiment will be described in detail with reference to the accompanying drawings. Here, the same reference numerals are used for the same components, and repeated descriptions and detailed descriptions of well-known functions and configurations that may unnecessarily obscure the gist of the invention will be omitted. The embodiments of the present invention are provided in order to more completely explain the present invention to those of ordinary skill in the art. Accordingly, the shapes and sizes of elements in the drawings may be exaggerated for clearer description.

1 is a block diagram illustrating the configuration of a software management system of a one-way secure data transmission apparatus according to an embodiment of the present invention. 2 is a view showing the screen UI of the security policy setting unit and the security policy display unit shown in FIG. 1, FIG. 3 is a view showing the screen UI of the packet log display unit shown in FIG. 1, FIG. 4 is It is a diagram illustrating a screen UI of the one-way protocol setting unit shown in FIG. 1 . And, FIG. 5 is a block diagram for explaining an example of using the software management system of the unidirectional secure data transmission apparatus according to an embodiment of the present invention.

1 to 5, the software management system 100 of the one-way secure data transmission device is for managing software of the one-way data transmission device that transmits secure data from a secure area to a non-secure area, and a security policy setting unit ( 110 ), a security policy display unit 120 , a packet log display unit 130 , and a one-way protocol setting unit 140 .

The security data in this embodiment may include vibration data generated during operation of mechanical facilities provided in public institutions. For example, a failure can be predicted by monitoring the vibration generated in DCS (Distributed Control System), which is a distributed control device installed in a public institution, using a monitoring device. can be sent to However, the type of security data is not limited thereto, and any data that requires security throughout the industry, such as IoT data in the smart factory industry, may be applied.

The security policy setting unit 110 may provide a screen UI to set and add a security policy for the security area, or to select and modify or delete one of at least one entered security policy. For example, as shown in FIG. 2 , the security policy setting unit 110 sets and adds a new security policy, selects an added security policy, and displays the screen UI so that detailed items can be modified or selected and deleted. can provide

The security policy display unit 120 may output a list of security policies set by the security policy setting unit 110 together with the screen UI of the security policy setting unit 110 . For example, as shown in FIG. 2 , when an administrator adds or modifies a security policy to the security policy setting unit 110 , the security policy display unit 120 displays a list of the added or modified security policies on the screen UI. can be displayed in If one of a plurality of security policies is selected and deleted in the security policy setting unit 110 , the security policy display unit 120 may output the deleted security policy except for the deleted security policy.

Specifically, in the security policy setting unit 110, the administrator adds a new security policy by inputting information about the protocol (security policy name / protocol / source address / destination address / destination port number, etc.) to allow one-way transmission, The administrator can select the currently added security policy again and modify the setting information. In addition, the administrator may select and delete the currently added security policy, and the set security policy may be internally reflected and applied, and then displayed on the security policy display unit 120 .

The packet log display unit 130 may output a log of packets allowed or blocked according to the security policy set in the security policy setting unit 110 on the screen UI. For example, the packet log display unit 130 is a packet security that can block detailed packets beyond the protocol through the security policy setting unit 110 due to the advancement of the technology for setting the security policy only in the range of the conventional protocol. Logs for packets allowed or blocked by policy can be output on the screen UI. That is, as shown in FIG. 3 , a log for packets allowed or blocked from the security area set in the security policy setting unit 110 may be displayed.

Specifically, the packet log display unit 130 displays information about allowed or blocked packets according to the currently set and applied security policy (information on the time when the packet is blocked or allowed / in case of an allowed packet, the related security policy name (blocked packet) (space is displayed) / whether packets are allowed or blocked / protocol / source address / destination address / destination port number, etc.) can be displayed.

On the other hand, the software management system 100 may further include a warning signal transmission unit 150 for transmitting a warning signal to an external management server when a packet not permitted by the security policy setting unit 110 is transmitted to the non-security area. can For example, when the warning signal transmitter 150 detects a situation in which an unauthorized packet is being transmitted to the non-security area, it can notify the administrator of this content through e-mail, etc., and the administrator can check this and take appropriate action immediately be able to take

The one-way protocol setting unit 140 may provide a screen UI so that the security policy setting unit 110 can set a protocol to allow one-way transmission. That is, the one-way protocol setting unit 140 is provided to input information about a protocol that will allow one-way transmission from the secure area to the non-secure area, and the protocol to be used as the protocol for allowing the one-way transmission in the security policy setting unit 110 . A screen UI can be provided to perform functions such as addition, modification, and deletion of the packet and the packet.

For example, in the one-way protocol setting unit 140, the administrator adds a new protocol by inputting information about the protocol and packet (protocol name / field name / data type / display type / type value / byte order / description, etc.). After that, you can select the currently added protocol again to modify the setting information. In addition, the administrator may select and delete the currently added protocol, and the set protocol may be internally reflected and applied and displayed on the security policy setting unit 110 .

6 is a block diagram schematically showing the configuration of a one-way secure data transmission apparatus according to an embodiment of the present invention, and FIG. 7 is a cross-sectional view schematically illustrating the configuration of the one-way secure data transmission apparatus shown in FIG. 6 . In this embodiment, the difference from the previous embodiment will be mainly described.

6 to 7 , the unidirectional secure data transmission device 200 is hardware on which the aforementioned software is installed, and includes a software storage unit 210 , a switch 220 , a PCB substrate 230 , and a cooling member ( 240 ), and a case 250 .

The software storage unit 210 is a kind of memory chip in which software is stored, and includes a security policy setting unit 110 , a security policy display unit 120 , a packet log display unit 130 , and a one-way protocol setting unit 140 . can do.

The switch 220 is connected to the TX of the transmitting server located in the secure area and the RX of the receiving server located in the non-secure area, and may select to allow transmission of secure data from TX to RX or RX to TX. That is, it is possible to prevent human error due to cable replacement by forming such that one-way communication from the non-secure area to the secure area is possible according to the operation of the switch, rather than simply short-circuiting the cable as in the prior art to perform one-way communication. In addition, it is possible to prevent the life of the cable from being shortened due to frequent replacement.

The PCB board 230 is a main board, and a software storage unit 210 and a switch 220 may be installed therein. For example, the software storage unit 210 and the switch 220 may be electrically connected by soldering on the PCB substrate.

The cooling member 240 is for cooling the heat generated in the PCB substrate 230, and at least one or more may be provided. For example, the cooling member 240 may be provided as a system fan, and may include a first cooling fan for cooling the CPU and a second cooling fan for cooling components other than the CPU. As described above, as the cooling member 240 is provided in the unidirectional secure data transmission device 200, it is possible to prevent a decrease in lifespan due to heat generation and a decrease in security data processing performance even in an environment that operates 24 hours 365 days a year.

In the case 250 , the PCB substrate 230 and the cooling member 240 are installed, and an installation groove for installing the PCB substrate 230 and the cooling member 240 may be recessed in one inner surface thereof. The case 250 may be formed of a material having good thermal conductivity such as aluminum or copper for heat dissipation, and a plurality of circulation holes may be formed to circulate air by the cooling fan.

For example, the inside of the case 250 is formed to have a depth of 30 cm may be provided to have a compact size. That is, most of the conventional cases are manufactured to have a depth of 40 cm or more, but the case 250 according to the present invention is formed to have a depth of 30 cm or less, thereby facilitating transportation for installation or relocation. In addition, conventionally, a rack rail kit is additionally required due to the large size of 40 cm or more to mount the case to the rack of the server in order to use the product. This has the advantage of reducing costs during installation or relocation.

Meanwhile, the one-way secure data transmission apparatus 200 may further include a LAN card 260 and a redundant power supply 270 .

The LAN card 260 is disposed on one side of the PCB board 230 and operates in TX mode or RX mode according to the selection of the switch 220 to transmit security data from the sending server to the receiving server, or from the receiving server to the sending server. can be sent to For example, the switch 220 allows the LAN card 260 to operate in a TX mode or an RX mode, whereby secure data can be transmitted in a single direction.

The redundant power supply 270 is provided with one power and two power terminals, is disposed on the other side of the PCB substrate 230 , and may supply power to the PCB substrate 230 and the cooling member 240 . The redundant power supply 270 is to prevent system down, and if the unidirectional secure data transmission device 200 does not continuously receive DC power of 24V, a failure occurs and the system stops. In order to prevent such an accident, a redundant power supply 270 is installed on the input power side, and even if one power terminal of the two power terminals is short-circuited due to an abnormal situation such as a power outage, it is transferred by the other power terminals, such as system down. Accidents can be prevented in advance.

8 is a block diagram schematically illustrating a method for transmitting secure data from a transmitting server located in a secure area to a receiving server located in a non-secure area using a one-way secure data transmission apparatus according to an embodiment of the present invention.

Referring to FIG. 8 , DEVICE DRIVER A to C of a transmission server (SSSS TX Server) located in the secure area may collect data from different devices A, B, and C using a protocol suitable for each device. Here, the device drivers are marked separately as A, B, and C, meaning that the data collection target devices are different devices and use different protocols. That is, the type or number of devices may be added according to the configuration of the actual field environment.

After that, the DEVICE MANAGER transfers the data received from the DEVICE Drivers to the NETWORK POLICY, and the NETWORK POLICY inspects the collected packets according to the network policy configured by the administrator. Otherwise, the packet is blocked. That is, the NETWORK POLICY is the one-way protocol setting unit 140 in the present invention, and at this time, it is possible to record the history of transmission or blocking in the NETWORK LOG. And, the security data allowed to be transmitted by the NETWORK POLICY can be ENCRYPT and sent to the NEWORK INTERFACE ADAPTOR (Tx LAN card).

After that, the NEWORK INTERFACE ADAPTOR (Rx LAN card) of the receiving server (SSSS RX Sever) located in the secure area DECRYPT the received security data to check whether the data transmitted from the sending server (SSSS TX Sever) is correct, forged or forged. check According to the check result, if the packet is not transmitted from the sending server (SSSS TX Server) or it is a forged or forged packet, it is blocked. If not, the security data is transmitted to the CHANNEL MANAGER.

Then, the HANNEL MANAGER transmits the received data to the specified destination, and the CHANNEL DRIVER A ~ C can receive data for different types of destinations using the protocol appropriate for each destination.

As described above, the unidirectional secure data transmission device and its software management system allow the administrator to configure a security policy for the communication interface section between the secure area and the non-secure area, and allow or block network packets according to the set security policy. Because it provides a record of the security data, it is possible to safely transmit security data between heterogeneous systems.

In addition, as the administrator sets a security policy for network packets to be transmitted from the secure area to the non-secure area and provides only allowed packets to transmit secure data, the cyber security of the one-way secure communication interface can be strengthened.

In addition, when it is detected that packets that are not allowed by the administrator's security policy setting are transmitted to the non-security area, the administrator can take immediate action by sending a warning signal to the administrator through e-mail sending or the like.

In addition, since a system for acquiring heterogeneous communication interface data is basically built-in, different types of communication interface data can be unidirectionally linked without the need for installing a separate software system.

In addition, the security area can be safely protected from external cyberattacks at all times by unidirectionally transmitting data from the secure area to the non-security area and blocking all data transmitted from the non-security area to the secure area.

In addition, the packet transmitted from the secure area to the non-secure area is encrypted and transmitted using a verified encryption algorithm, and integrity is checked in the process of decrypting the packet to block data leakage due to forgery or falsification.

In addition, by providing a hardware device capable of installing the software storage unit, only one-way transmission from the secure area to the non-secure area may be physically possible.

In addition, when more data processing is required or a hardware specification upgrade is required to use a stronger security algorithm, high-performance parts are easily available on the market, and only those parts need to be replaced, enabling efficient hardware specification upgrade.

In addition, in order to support new protocols by managing metadata for protocols that can compose security policies as separate metadata files rather than supporting them as source codes in the program, only metadata files are added without modifying the source code. Therefore, it is possible to fundamentally block the possibility of defects and the occurrence of additional time required due to source code modification.

In addition, by mounting a switch that can select TX mode and RX mode on the PCB board, one hardware device enables one-way communication in the forward or reverse direction by corresponding to the sending server and the receiving server, respectively. Since it is provided by the internal circuit instead of the cable, human error due to cable replacement can be prevented.

In addition, as the first cooling fan for cooling the CPU and the second cooling fan for cooling the components other than the CPU are installed inside the hardware, the lifespan is reduced due to heat generation and security data processing even in an environment that operates 24 hours a day, 365 days a year performance degradation can be prevented.

Although the present invention has been described with reference to an embodiment shown in the accompanying drawings, which is merely exemplary, those skilled in the art will understand that various modifications and equivalent other embodiments are possible therefrom. will be able Accordingly, the true scope of protection of the present invention should be defined only by the appended claims.

110: security policy setting unit
120: security policy display unit
130: packet log display unit
140: one-way protocol setting unit
150: warning signal transmitter
210: software storage unit
220: switch
230: PCB board
240: cooling member
250: case
260: LAN card
270: redundant power supply

Claims (8)

A software management system for a one-way secure data transmission device for managing software of a one-way data transmission device that transmits secure data from a secure area to a non-secure area, the software management system comprising:
a security policy setting unit providing a screen UI to set and add a security policy for the security area, or to select and modify or delete one of at least one entered security policy;
a security policy display unit for outputting a list of security policies set in the security policy setting unit together on the screen UI;
a packet log display unit for outputting a log for packets allowed or blocked according to the set security policy on the screen UI; and
a one-way protocol setting unit that provides a screen UI so that the security policy setting unit can set a protocol to allow one-way transmission;
including,
The receiving server located in the non-secure area checks whether the security data is the data transmitted from the transmitting server in the secure area, whether it is forged or forged data, and then receives the security data one-way security data transmission The device's software management system.
The method of claim 1,
and a warning signal transmission unit configured to transmit a warning signal to an external management server when a packet not permitted by the security policy display unit is transmitted to the non-security area.
According to claim 1,
The security data is a software management system of a one-way security data transmission device including vibration data generated during operation of a mechanical facility provided in a public institution.
According to claim 1,
The one-way protocol setting unit is provided to input information about a protocol to allow one-way transmission from the secure area to the non-secure area.
According to claim 1,
The one-way protocol setting unit is a software management system for a one-way secure data transmission device configured to add, modify, and delete packets for a protocol to be used as a protocol to allow the one-way transmission.
A one-way secure data transmission device comprising the software management system according to any one of claims 1 to 5,
a software storage unit including the security policy setting unit, the security policy display unit, the packet log display unit, and the one-way protocol setting unit;
a switch connected to the TX of the transmitting server located in the secure area and the RX of the receiving server located in the non-secure area, and selecting to allow transmission of secure data from the TX to RX or from the RX to TX;
a PCB board on which the software storage unit and the switch are installed;
at least one cooling member for cooling the heat generated from the PCB substrate; and
a case in which the PCB substrate and the cooling member are installed; One-way secure data transmission device comprising a.
7. The method of claim 6,
A LAN card disposed on one side of the PCB board and operated in TX mode or RX mode according to the selection of the switch to transmit the security data from the sending server to the receiving server, or from the receiving server to the sending server. One-way secure data transfer device comprising.
7. The method of claim 6,
One-way security data transmission device disposed on the other side of the PCB substrate, and further comprising a redundant power supply for supplying power to the PCB substrate and the cooling member.

Images