Cloud Network Security Routing Engine Scalability
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network security solutions are expensive and do not scale well with increasing user numbers, requiring frequent updates to address new threats, and often necessitate additional hardware and software investments, which can become obsolete during business downsizing or mergers.
Innovation Solution
A cloud-based security service system utilizing a security center that provides scalable security services through geographically distributed security centers, routing engines, and service aggregators, enabling secure communication paths over public networks with minimal modifications to existing infrastructure, and supporting services like VPNs, intrusion detection, and firewall protection.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional network security solutions are deployed to protect computer networks, then security protection is provided, but the cost increases and scalability deteriorates as user numbers grow
Solution Approach 1:
The patent introduces a cloud-based security service system as an intermediary between network users and security protection mechanisms. This mediator handles security operations remotely, allowing individual users to access security services without each user needing dedicated security hardware or software, thereby improving scalability while maintaining security protection.
Solution Approach 2:
The patent combines security services for multiple users into a unified cloud-based system. By merging individual security functions into a shared infrastructure, the system achieves economies of scale where security protection is provided to multiple users through common resources, reducing per-user costs and improving overall scalability.
2Reliability
If security infrastructure is updated periodically to address new threats, then security effectiveness is improved, but costs and complexity increase
Solution Approach 1:
The cloud-based security service acts as an intermediary that centralizes threat update distribution. Instead of each user independently updating their security infrastructure, the mediator system manages and distributes updates centrally, reducing the complexity of maintaining security across distributed users while ensuring effectiveness against new threats.
Solution Approach 2:
The patent creates a universal security platform that serves multiple functions: threat detection, update distribution, and protection across diverse user environments. This multi-functional system reduces overall complexity by consolidating what would otherwise require separate specialized components for each user.
3Reliability
If additional security hardware and software are acquired to service new users, then security coverage is improved, but costs increase and resources may become obsolete
Solution Approach 1:
The patent merges security resources into a shared cloud infrastructure that serves multiple users simultaneously. This consolidation allows security coverage to expand with user growth without requiring proportional increases in physical hardware and software licenses, as the same resources are reused across users through virtualization and shared access.
Solution Approach 2:
The cloud-based security system creates universal resources that can dynamically serve different users and security needs. Rather than acquiring dedicated resources for each user, the system provides universal access to security functions, reducing the total quantity of hardware and software required while maintaining comprehensive security coverage.
Data Source
AI summary
An approach is provided for performing cloud based computer network security services. Data traffic from a plurality of networks corresponding to a plurality of subscribers are received. Data traffic is routed to a security platform over a communication path to one or more service aggregators to process the data traffic according to one or more security services performed by the security platform. The security services are provided as a managed service by a service provider. The processed data are received from the one or more service aggregators, and routed to the corresponding one of the networks.