Secure Network Bridge Server for Zero-Day Patching

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

End-user computers within secure networks face challenges in automatically updating backend applications due to security protocols, leading to compatibility issues between updated frontend and backend applications, where backend updates are inaccessible or incompatible.

Innovation Solution

A system utilizing a first server to search for and download updates from an internet location, storing them on an entity server within the secure network, and managing the installation of these updates on user computers, including compatibility checks and rollback processes to ensure compatibility with existing applications.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If security protocols prevent downloading updates from internet locations, then network security is improved, but backend application updates become inaccessible

Engineering Contradiction:
Improvenetwork securityVSAvoidupdate accessibility
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

A server within the secure network acts as an intermediary between the internet and end-user computers. This server downloads updates from internet locations and makes them available to the secure network, allowing updates to be obtained without end-user computers directly accessing external locations, thus maintaining security while enabling update accessibility.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Adaptability or versatility

If frontend applications are dynamically updated, then application functionality is improved, but compatibility conflicts with backend applications may occur

Engineering Contradiction:
Improveapplication update capabilityVSAvoidcompatibility
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The system performs compatibility checks before installing updates. The server checks whether updated backend applications are compatible with frontend applications running on end-user computers, and only installs updates that pass compatibility verification, preventing compatibility conflicts before they occur.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system implements a rollback mechanism that monitors compatibility after updates. If compatibility conflicts are detected after a backend application update, the system automatically rolls back to the previous version, providing feedback-based error correction to maintain system reliability.

Inventive Principle:
Principle #23Feedback

3Manufacturing precision

If updates are manually downloaded and installed, then compatibility control is improved, but update installation time is increased

Engineering Contradiction:
Improvecompatibility controlVSAvoidupdate installation time
Core Design Contradiction:
Manufacturing precisionVSLoss of time

Solution Approach 1:

The system enables automatic update installation where the server automatically downloads, checks for compatibility, and installs updates on end-user computers without requiring manual user intervention. This self-service approach maintains compatibility control through automated checks while significantly reducing update installation time.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS12118090B2Zero-day patching within an entity's secure network
Publication Date: 2024.10.15 BANK OF AMERICA CORP
  • US12118090B2 patent drawing
  • US12118090B2 patent drawing
  • US12118090B2 patent drawing

AI summary

A system that involves a secure network, an unsecure network and a bridge server is provided. The bridge server may retrieve updates to applications from the unsecure network. The bridge server may store the retrieved updates on a secure storage location within the secure network. Devices located on the secure network may continually, periodically or otherwise check the secure storage location for updates. The updates may be downloaded to the devices for execution on the devices.