ARP Cache Integrity Checks with Smart Contracts and Segmented Encryption

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Address resolution protocol (ARP) entries are vulnerable to tampering during network communications, leading to ARP cache poisoning and man-in-the-middle attacks, necessitating a secure and efficient protection mechanism.

Innovation Solution

A system that identifies ARP cache tables, determines firewall properties, executes smart contracts with authorization protocols and homomorphic encryption, and applies network segmentation to protect ARP cache tables from tampering.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional ARP cache tables are used without additional security measures, then network communication efficiency is maintained, but the system becomes vulnerable to ARP cache poisoning and man-in-the-middle attacks

Engineering Contradiction:

ImproveARP cache securityVSAvoidsystem complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a smart contract as an intermediary layer between network devices and the ARP cache table. This smart contract automatically monitors ARP requests, validates their authenticity, and updates the ARP cache only after verification. The intermediary mechanism prevents direct tampering with the ARP cache while maintaining automated security validation, thus improving reliability without requiring complex manual intervention systems.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The system performs preliminary validation of ARP requests through smart contract execution before allowing updates to the ARP cache table. By pre-authorized and pre-validated ARP entries through cryptographic verification, the system prevents malicious entries from being inserted in the first place, thereby enhancing security without requiring complex post-detection response mechanisms.

Inventive Principle:

Principle #10Preliminary action

2Reliability

If real-time monitoring and validation of ARP cache properties is implemented, then security against tampering is improved, but computing resources and processing time increase

Engineering Contradiction:

ImproveARP cache integrityVSAvoidcomputing resource consumption

Core Design Contradiction:

ReliabilityVSUse of energy by moving object

Solution Approach 1:

The system implements partial monitoring by focusing validation efforts only on critical firewall properties of the ARP cache table rather than exhaustive monitoring of all entries. The smart contract selectively validates specific attributes such as IP-MAC address pair authenticity and detects anomalies only when property changes exceed predetermined thresholds, thereby reducing overall computing resource consumption while maintaining effective security monitoring.

Inventive Principle:

Principle #16Partial or excessive action

3Reliability

If homomorphic encryption is applied to the ARP cache table, then data security is enhanced, but processing speed and access efficiency decrease

Engineering Contradiction:

ImproveARP cache data securityVSAvoidnetwork processing speed

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The patent segments the ARP cache table into encrypted and unencrypted portions. Critical security-sensitive data fields within ARP entries are encrypted using homomorphic encryption, while non-critical fields remain accessible in plaintext. This segmentation allows the system to apply strong encryption only where necessary for security, maintaining overall data protection while preserving processing speed for non-sensitive operations and reducing the performance overhead of full-table encryption.

Inventive Principle:

Principle #1Segmentation

Data Source

PatentUS12506712B2Systems and methods for implementing real time protocol modifications for address resolution protocols in a network environment

Publication Date: 2025.12.23 BANK OF AMERICA CORP

AI summary

Systems, computer program products, and methods are described herein for implementing real time protocol modifications for address resolutions protocols in a network environment. The present disclosure is configured to identify an address resolution protocol (ARP) cache table comprising an internet protocol (IP) address and a media access control (MAC) address for a communication mapping(s); determine a firewall property(ies) of the ARP cache table for the communication mapping(s); compare the firewall property(ies) to at least one normal firewall property and determine whether the firewall property(ies) is anomalous compared to the normal firewall property(ies); automatically execute a smart contract, wherein the smart contract comprises an authorization protocol(s) for the ARP cache table and an execution of a homomorphic encryption for the ARP cache table; and protect the ARP cache table based on the execution of the smart contract with the authorization protocol(s) and the homomorphic encryption.