A secure architecture in which encrypted information can travel from an operational network to an authorized destination but cannot return through the same path. It helps expose process data for reporting without creating a route to control equipment.