Combined Network Physical Security Appliance Correlation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Physical security systems and network security systems are often separated, making them vulnerable to attacks, where physical security systems can become vectors for network threats, and network security systems lack physical security, allowing unauthorized access.

Innovation Solution

A combined network and physical security appliance that correlates physical sensor signals with packet inspection results, providing enhanced protection against network threats to physical security systems and physical protection against network threats by integrating network and physical security into a single device.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If physical security systems and network security systems are separated into different devices, then each system can be optimized for its specific function, but the systems become vulnerable to attacks where physical security systems can become vectors for network threats and network security systems lack physical protection

Engineering Contradiction:
Improvesecurity protectionVSAvoidsystem integration
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent combines physical security and network security functions into a single integrated appliance. The device includes both physical security components (sensors, alarms) and network security components (firewall, packet inspection) within one housing, allowing correlation between physical sensor signals and network packet data to detect and prevent attacks that exploit the interface between physical and network systems

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The security appliance performs multiple security functions simultaneously - it monitors physical sensors, inspects network packets, correlates data from both sources, and provides both physical and network security protection through a single device, eliminating the need for separate dedicated systems

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Adaptability or versatility

If physical security systems are connected to networks for automation and monitoring, then functionality and monitoring capability are enhanced, but the systems become vulnerable to network-based attacks and unauthorized access

Engineering Contradiction:
Improveautomation capabilityVSAvoidnetwork threats
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The integrated security appliance acts as an intermediary between the physical security sensors and the network. It receives and processes network packets, correlates them with physical sensor signals, and can block malicious traffic while allowing legitimate automation communications, thus mediating the connection to prevent network threats from compromising physical systems

Inventive Principle:
Principle #24Intermediary (Mediator)

3Reliability

If network security systems are deployed without integrated physical security, then network traffic can be monitored and filtered, but the systems remain vulnerable to physical access attacks and lack protection against threats originating from physical intrusions

Engineering Contradiction:
Improvenetwork securityVSAvoidsecurity architecture
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent merges network security appliances with physical security devices into one integrated unit. The device performs packet inspection, firewall functions, and physical sensor monitoring simultaneously, correlating network traffic patterns with physical sensor data to provide comprehensive security that addresses both network and physical access threats

Inventive Principle:
Principle #5Merging (Combining)

Data Source

PatentUS11314540B2Combined network and physical security appliance
Publication Date: 2022.04.26 FORTRESS CYBER SECURITY LLC
  • US11314540B2 patent drawing
  • US11314540B2 patent drawing
  • US11314540B2 patent drawing

AI summary

The present disclosure describes a combined network and physical security appliance. The appliance may be wired to or communicate with automation systems, IoT devices, physical sensors, computing devices and servers on an internal or local network, and other computing devices on an external network. By combining network security and physical security into a single device, a combination security appliance may correlate physical sensor signals with packet inspection results, providing enhanced protection against network threats to physical security systems, and physical protection against network threats.