System for Isolating a Secured Data Communication Network

• US 20120304279A1
• Filed: 05/25/2011
• Published: 11/29/2012
• Est. Priority Date: 05/25/2011
• Status: Active Grant

• Current Assignee: Engineered Solutions LP (Enerpac Tool Group Corp.)
• Original Assignee: Engineered Solutions LP (Enerpac Tool Group Corp.)
• Inventors: Hargis, Barry W.
• Granted Patent: US 8,566,922 B2
• Time in Patent Office: Days
• US Class Current: 726/14
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: H04L 63/0209 Architectural arrangements, e.g. perimeter networks or demilitarized zones

Abstract

A system for isolating a data communication network has been developed. The system includes an internal computer system with an internal computer that is in data communication with the internal computer system, and an external computer system with an external computer that is in data communication with the external computer system. The internal and external computers are connected with an ethernet adapter that only allows transmission of data from the internal computer system and prohibits the receipt of data by the internal computer system.

Claims

1. A system for isolating a data communication network, comprising:

a secured internal computer system;

an internal computer that is in data communication with the internal computer system;

an unsecured external computer system;

an external computer that is in data communication with the external computer system;

an RJ45 ethernet jack that connects the internal computer with the external computer so that the internal computer system may transmit data to the external computer; and

where the transmit pins on the RJ45 ethernet jack for the external computer are not connected to the internal computer to prevent transmission of data from the external computer to the internal computer.

2. A system for isolating a data communication network, comprising:

an internal computer system;

an internal computer that is in data communication with the internal computer system;

an external computer system;

an external computer that is in data communication with the external computer system; and

an ethernet adapter that connects the internal computer with the external computer so that data communication is established between the internal computer system and the external system, where the ethernet adapter only allows transmission of data from the internal computer system and prohibits the receipt of data by the internal computer system.

3. The system of claim 2, where the ethernet adapter comprises an RJ45 ethernet jack that connects the internal computer and the external computer.

4. The system of claim 2, where the transmit pins of the ethernet adapter for the external computer are not connected.

5. The system of claim 2, where the internal computer communicates to the external computer using a UDP/IP communication standard.

6. The system of claim 2, where the communication data integrity from the internal computer to the external computer is check with a cyclic redundancy check (CRC) calculation.

7. The system of claim 2, where the internal computer communicates to the external computer using a Modbus communication protocol.

8. A system for isolating a data communication network, comprising:

an internal computer system;

an external computer system; and

means for allowing one way communication from the internal computer to the external computer system with an ethernet adapter.