Application Profiles for Secure Multi-Network Interface Selection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Electronic devices used in both work and personal environments face security risks due to potential unauthorized access or operations when accessing external resources through enterprise networks, posing a threat to confidential information.
Innovation Solution
The electronic device employs multiple network interfaces and profiles to segregate communications between enterprise and personal networks, using a network connection manager to associate specific applications with designated network interfaces and profiles, ensuring secure communication over enterprise networks and separate communication over personal networks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If multiple network interfaces are used for both enterprise and personal communications, then communication versatility is improved, but security risk increases due to potential unauthorized access
Solution Approach 1:
The patent segments network interfaces and applications into distinct groups using profiles. Each profile associates specific network interfaces with specific applications, creating isolated communication channels. This segmentation prevents personal applications from accessing enterprise networks and vice versa, thus maintaining communication versatility while eliminating security risks through structural separation.
Solution Approach 2:
The patent applies local quality by assigning different security characteristics to different network interfaces based on their intended use. Enterprise network interfaces are configured with strict access controls and associated only with enterprise applications, while personal network interfaces allow broader access. This localized security approach ensures that security measures are applied precisely where needed without affecting overall system functionality.
2Reliability
If network interfaces are segregated by profiles for different applications, then security is improved, but device complexity increases
Solution Approach 1:
The patent creates a universal profile management system that handles multiple network interfaces and applications through a common framework. The profile data structure and association mechanism serve as a multi-functional solution that works across different interface types and application categories, simplifying the overall system architecture despite the increased number of components.
Solution Approach 2:
The patent introduces profiles as intermediary entities that mediate between applications and network interfaces. Rather than directly managing complex interface assignments, the system uses profiles as a intermediate layer that simplifies the association process. This intermediary approach reduces the complexity of direct interface-management while maintaining security through controlled access relationships.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
In some examples, an electronic device includes a plurality of network interfaces to communicate over respective different networks, and a storage medium to store information associating a first application of the electronic device with a first profile, and associating a second application of the electronic device with a second profile. The first profile selects a first network interface of the plurality of network interfaces to use for communications, and the second profile selects a second network interface of the plurality of network interfaces to use for communications.