Blockchain WAAP API Safety Grading for Trusted Web Security

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing integrated web security solutions lack comprehensive protection for APIs, leading to increased hacking and security incidents, and there is a need for a cost-effective, integrated web security solution that addresses API protection, bot mitigation, and DDoS defense.

Innovation Solution

A blockchain-based security system that manages API and WAAP levels using distributed synchronization and integrity guarantee technologies, providing a dynamic life cycle for APIs and WAAPs, ensuring secure API use and reliable infrastructure management.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If integrated web security solutions are introduced to protect APIs, then security reliability is improved, but device complexity and implementation burden increase

Engineering Contradiction:

ImproveAPI security protectionVSAvoidsecurity solution complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent combines multiple security functions (WAF, API protection, bot mitigation, DDoS defense) into a single integrated WAAP platform. This merging approach provides comprehensive security protection while simplifying deployment and management, as organizations no longer need to implement and coordinate multiple separate security solutions.

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The WAAP platform is designed with multi-functionality to handle various security threats across different layers (web application, API, bot, DDoS). This universal security solution can protect diverse APIs and web applications through a single system, reducing overall system complexity while maintaining high reliability.

Inventive Principle:

Principle #6Universality (Multi-functionality)

2Adaptability or versatility

If comprehensive API protection functions are added to integrated web security solutions, then security coverage is improved, but cost increases

Engineering Contradiction:

Improvesecurity protection coverageVSAvoidimplementation cost

Core Design Contradiction:

Adaptability or versatilityVSEase of manufacture

Solution Approach 1:

By merging multiple security functions into one platform, the patent achieves comprehensive API protection coverage without requiring separate implementations for each security function. This consolidation provides cost-effectiveness by reducing the need for multiple specialized security products and their associated licensing, deployment, and maintenance costs.

Inventive Principle:

Principle #5Merging (Combining)

3Reliability

If blockchain technology is integrated into the security system for trust verification, then security trustworthiness is improved, but system complexity increases

Engineering Contradiction:

Improvesecurity trust verificationVSAvoidsystem architecture complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces blockchain technology as an intermediary layer for trust verification between the WAAP platform and external entities. This mediator provides decentralized, tamper-proof verification of security operations and API safety grades, enhancing trustworthiness while maintaining a relatively simple architecture through standardized blockchain integration interfaces.

Inventive Principle:

Principle #24Intermediary (Mediator)

4Reliability

If API safety grading and verification mechanisms are implemented, then API security management is improved, but processing time and operational complexity increase

Engineering Contradiction:

ImproveAPI safety managementVSAvoidverification processing time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The patent implements preliminary API safety grading where APIs are evaluated and assigned safety grades before being made operational. This advance verification allows the system to pre-establish trust relationships, reducing real-time verification overhead and processing time during actual API operations.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent replaces manual or complex mechanical verification processes with automated blockchain-based verification mechanisms. This substitution uses cryptographic proofs and smart contracts to automatically verify API safety grades, significantly reducing processing time compared to traditional manual verification methods.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS20260075042A1Blockchain based security system and method using WAAP/API level management

Publication Date: 2026.03.12 PENTA SECURITY SYST INC

AI summary

Disclosed is a blockchain-based security method that is performed by an integrated web security solution (web application and API protection, WAAP) and using WAAP and application programming interface (API) level management. The blockchain-based security method may comprise: receiving an API safety grade check request from the blockchain under a session establishment with the blockchain, wherein, in the checking of the API safety grade, a security level for vulnerability of the API is checked by itself in management API data of the WAAP with a highest level of safety; and transmitting information on the API safety grade to the blockchain.