Client Data Replication Control via Location Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Sensitive information is at risk of being compromised when transferred to client machines located outside secure company buildings, as these machines can be lost or stolen, and existing methods lack effective control over data replication in unsecured locations.
Innovation Solution
A method that determines the location of a client machine by executing a TCP/IP network traceroute and comparing it to predefined lists of secure or insecure hosts, allowing or preventing data replication based on the machine's location, ensuring sensitive information is only accessed in secure environments.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If sensitive information is transferred to client machines outside secured buildings, then employees can access information when traveling or working remotely, but the information is at risk of being lost, stolen, or compromised
Solution Approach 1:
The patent introduces an intermediary system that acts as a mediator between the data repository and client machines. This intermediary evaluates location information (such as GPS coordinates, IP address, or device identifiers) against predefined secure locations before allowing data access. The intermediary controls data flow by permitting access only when the client machine is determined to be in an approved location, thus resolving the contradiction between enabling remote access and maintaining security.
2Reliability
If data replication is prevented for all external locations, then security is maintained, but employees cannot access information when away from the office
Solution Approach 1:
The patent applies local quality by differentiating access permissions based on specific locations rather than applying a universal restriction. The system defines particular geographic locations or networks as secure (such as employee homes, partner offices, or specific IP ranges) and grants data access only when the client machine is detected at these predefined secure locations. This location-specific approach allows employees to access sensitive information remotely at approved locations while maintaining security restrictions at unapproved locations.
3Reliability
If location verification is implemented to control data access, then security is enhanced, but system complexity increases due to location determination requirements
Solution Approach 1:
The patent implements self-service by requiring client machines to automatically provide location information (such as GPS coordinates, device identifiers, or network address) without manual intervention. The system autonomously retrieves this location data, compares it against the predefined secure locations database, and makes access decisions automatically. This automated approach reduces the need for manual security checks and minimizes user burden while maintaining security controls.
Data Source
AI summary
A request is received for predefined data from a client machine. It is determined if the client machine is at an acceptable location to receive the predefined data. The requested predefined data is replicated to the client machine if the client machine is at an acceptable location and replication of the predefined data is prevented if the client machine is at an unacceptable location.