Public sector

Link between security domains

The only environment where the absence of an electrical signature is the main argument rather than a side effect.

Area
Fiber & OT
Architecture patterns
1
Products used
8

The problem

What makes it hard

Two things that reinforce each other: the diode removes the logical return path, and the fiber removes the electrical one.

This is the only environment where the absence of an electrical signature is the main argument rather than a side effect. In a certified installation the zone boundary is where the risk lives, and every copper conductor that crosses it can carry emissions out.

How it is built

Link between security domains with a signature requirement

The diode removes the logical return path, the fiber removes the electrical one — the two reinforce each other.

See the full pattern
The diode removes the logical return path, the fiber the electrical one. The two reinforce each other.High domainLow domainSystemData diodeReceptionfiber: noelectricalsignatureno logical returnpath
The diode removes the logical return path, the fiber the electrical one. The two reinforce each other.High domainLow domainSystemData diodeReceptionfiber: no electricalsignatureno logicalreturn path
  • One-way path
  • Data path
  • Path that does not exist
The diode removes the logical return path, the fiber the electrical one. The two reinforce each other.

In the catalogue

Equipment from the catalogue

Built from: Data Diode Secure 1 Gbit MM TEMPEST 60-00-7303, Data Diode Secure 1 Gbit SM 60-00-8362, Data Diode Bidirectional 1 Gbit Dual AC 60-00-7563 and 5 more below.

TEMPEST Level A · RÖS U1

Data Diode Secure 1 Gbit MM TEMPEST

Data rate
1 Gbps
Wavelength
Multimode 850 nm
Input, LC
1000 BaseSX

Product no 60-00-7303

Standard

Data Diode Secure 1 Gbit SM

Data rate
1 Gbps
Wavelength
Singlemode 1310 nm
Input, LC
1000 BaseLX

Product no 60-00-8362

Standard

Data Diode Bidirectional 1 Gbit Dual AC

Secure two-way communication using a fully hardware-based design that removes any risk of data flowing in the…

Product no 60-00-7563

Standard

Data Diode Bidirectional 1 Gbit Dual DC

Secure two-way communication using a fully hardware-based design that removes any risk of data flowing in the…

Product no 60-00-7564

TEMPEST Level A · RÖS U1

Secure Data Tap 1 Gbit

Duplication of network signals, including any existing physical errors, to transmit-only ports and is…

Product no 60-00-7450

Standard

Fiber Optical Switch 1x2 SM

Switching time
3.5 ms
Insertion loss, typical
<0.3 dB
Optical channels in/out
2 LC duplex

Product no 60-00-9150

TEMPEST Level B · RÖS U2

HDMI Diode

The Fibersystem HDMI Diode protects sensitive systems by ensuring that video and audio can only travel in one…

Product no 60-00-9155

Reading and references

Explained in

Named customer references are not published. What we can show is the solution area this environment belongs to, and the reasoning behind the design.

Sector

Environments

Environments with the same problem

The technology is the same; the buying process usually is not.

Hands soldering a circuit board under a work lamp

Next step

Describe your environment

If yours is close to this one but not the same, that difference is usually where the design decisions are. Tell us what it looks like.

Verified credentials

All certifications