Simplex Security Software Solution
SSSS (Simplex Security Software Solution) is a mission-critical one-way security solution designed to facilitate secure data and file transfer from highly sensitive secure areas (such as national security facilities and public institutions) to external non-security areas.
The foundation of SSSS is an absolute security guarantee implemented via two core functions:
Prevent Data Leakage:
Only the data within the secure zone that is explicitly allowed by the administrator is securely encrypted and successfully transferred to the non-security zone. All unapproved or unauthorized data is strictly blocked from transmission, ensuring data control and integrity.
Prevent External Intrusion:
SSSS actively blocks all data transmission originating from the non-secure area and directed toward the secure area. This mechanism provides an absolute physical and logical barrier against external cyber intrusion and hacking attempts.
Configuration Components and Operational Flow
The SSSS solution operates through a highly dedicated, three-part configuration:
SSSS Tx v3.0 (Secure Area Module):
Location:
Resides within the secure area. By default, it is configured to block all network packets and only allows communication with specific IPs based on the pre-approved network policy.
Function:
It acquires necessary data from the secure FTPS server, encrypts it according to the registered FTPS policy settings, and securely transmits the data to the SSSS Rx module located in the non-secure area.
SSSS Rx v3.0 (Non-Secure Area Module):
Location:
Resides within the non-secure area.
Function:
It receives the encrypted 'FTPS data' stream sent from the 'SSSS Tx' module and passes the information to the destination FTPS server within the non-secure network.
SSSS Manager v3.0 (Central Management):
Function:
Provides a comprehensive user GUI for centralized operation and monitoring.
Logging:
Displays detailed audit logs, including network logs (permission/control), accounting logs, and major system logs.
Control:
Allows administrators to manage all SSSS operational settings, such as access policy, FTPS policy, manager settings, server settings, log configurations, and database/mail settings.
Key Specifications and Security Assurance
Network Policy & Transfer:
SSSS establishes the one-way communication network, controlling data transmission based on strict packet verification. All allowed data is subjected to encrypted transfer for enhanced security.
Homogeneous & Heterogeneous Interface Support:
The system includes a self-developed communication interface program, eliminating the need to purchase a separate third-party interface. This built-in support ensures broad compatibility.
Supported Interfaces:
OPC DA / OPC UA / SQL / ORACLE / MODBUS / SERIAL (RS standard) / VMS / AMS / Other non-standard protocols and file transfers.
Encryption Algorithm & Verification:
Data is secured using the SEED algorithm, an encryption algorithm officially verified by the National Intelligence Service (NIS) of Korea.
Security Suitability:
Completed the security suitability verification test conducted by the National Institute of Security Technology.
Coding Compliance:
Completed verification for compliance with the latest secure coding guidelines by the Korea Internet & Security Agency.
Physical System and Network:
SSSS utilizes a physical unidirectional device configuration achieved through dedicated fiber optic cables and TX-RX units, ensuring that data flow is physically one-way.
Performance:
Provides a unidirectional transmission interval data rate of 1 Gbps.
Reliability:
Includes support for redundancy across equipment, power, and optical cables, alongside data protection and MTU SIZE throttling mechanisms.
Relevant Reference:
The solution has been successfully applied as the Unidirectional Security Solution for the VMS (Vibration Monitoring System) at Korea Southern Power Company.
Company Overview
Gaon Platform Inc. is an AI-based software development company incorporated in Daedeok Research Complex in Daejeon.
Using IoT measurement sensor data and image data, facility failures and safety accidents are predicted and prevented in advance,
Experience optimal processes and maintenance strategies by predicting facility performance and life expectancy.
We will do our best to provide the best technology and the best engineering services
Other Products