Public sector

Publishing between classification domains

The hard part is not the transport but the release decision: who decides that this document may leave, and how is that recorded.

Area
Data diodes
Architecture patterns
1
Products used
1

The problem

What makes it hard

Reports move down from a high domain to a low one, or open material moves up, without the link being reversible.

The diode solves half the problem. The direction is guaranteed in hardware; the classification of the content is not. Downward publishing is the one environment in this catalogue where a diode without an accompanying decision process can make things worse — it makes exfiltration convenient rather than awkward.

How it is built

Cross-domain publishing with a release decision

The diode controls direction; the release decision controls content — and they are different mechanisms.

See the full pattern
The diode enforces direction. The release decision governs content — and that is a person.High domainLow domainSource documentRelease decisionDiodePublishing surfaceperson with amandateone-wayno query back
The diode enforces direction. The release decision governs content — and that is a person.High domainLow domainSource documentRelease decisionDiodePublishing surfaceperson with a mandateone-wayno query back
  • One-way path
  • Data path
  • Path that does not exist
The diode enforces direction. The release decision governs content — and that is a person.

In the catalogue

Equipment from the catalogue

Built from: Data Diode Secure 1 Gbit MM TEMPEST 60-00-7303.

TEMPEST Level A · RÖS U1

Data Diode Secure 1 Gbit MM TEMPEST

Data rate
1 Gbps
Wavelength
Multimode 850 nm
Input, LC
1000 BaseSX

Product no 60-00-7303

Reading and references

Explained in

Named customer references are not published. What we can show is the solution area this environment belongs to, and the reasoning behind the design.

Sector

Environments

Environments with the same problem

The technology is the same; the buying process usually is not.

Hands soldering a circuit board under a work lamp

Next step

Describe your environment

If yours is close to this one but not the same, that difference is usually where the design decisions are. Tell us what it looks like.

Verified credentials

All certifications