Public and private sector
File lock and media transfer
This is where people work around the protection when it becomes inconvenient — the design has to assume that.
- Area
- Data diodes
- Architecture patterns
- 1
- Products used
- 1
The problem
What makes it hard
Replaces the USB sticks that currently pass between domains.
This is the only diode environment with a person in the flow, and therefore the only one where usability decides whether the security actually holds. A file lock that takes twenty minutes gets bypassed.
How it is built
File lock between domains
From a USB stick to a one-way transfer, with the human decision made explicit rather than assumed.
See the full pattern- One-way path
- Data path
- Path that does not exist
In the catalogue
Equipment from the catalogue
Built from: Docking Station Harddrive SATA 60-00-8261.
Reading and references
Explained in
Named customer references are not published. What we can show is the solution area this environment belongs to, and the reasoning behind the design.
Environments
Environments with the same problem
The technology is the same; the buying process usually is not.
- Replacing an air gapMapping the flows comes before choosing the product — the air gap is upheld by manual work that is rarely counted as cost.
- Registry functionPaper is a zone exit that no network diagram shows.
- Backup of a protected networkBackup is the only flow where the volume is large, completeness is absolute and the time window is set by someone else.
- Log export to a SOCThe one flow where the diode is cheaper and simpler than the alternative — which is why it is almost always the right first installation.
Next step
Describe your environment
If yours is close to this one but not the same, that difference is usually where the design decisions are. Tell us what it looks like.
Verified credentials
All certifications- Swedish Armed ForcesM-numbered equipmentMain supplier, Total Defence
- Government of SwedenSupplier to Swedish authoritiesPolice · FMV · FOI
- NATOCertified TEMPEST supplierSDIP-27 · Level A & B
- ISO 9001 14001ISO certifiedQuality & environmentDownload certificate (JPG)
- SOFFDefence industry memberExport control frameworks
- Made in SwedenDesigned & built in StockholmSecure supply chain
