Communication Apparatus Whitelist Abnormality Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication apparatuses with whitelist functions cannot detect abnormalities in objects registered in the whitelist, such as lost terminals or network intrusions, requiring additional monitoring systems that increase complexity and cost.
Innovation Solution
A communication apparatus that includes an arithmetic device, storage device, and communication interface, which stores a whitelist to manage allowed objects and analyzes communication behavior by calculating monitoring parameters, specifically the communication interval, to detect abnormalities in allowed objects.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a whitelist function is implemented to restrict operations of unregistered objects, then security against unauthorized operations is improved, but the ability to detect abnormalities in registered objects is lost
Solution Approach 1:
The patent applies preliminary action by establishing a whitelist function that pre-defines allowed objects and operations before security incidents occur. The system proactively identifies and restricts unauthorized operations rather than reacting to abnormalities after they manifest, thereby maintaining security while enabling detection through predefined criteria.
Solution Approach 2:
The patent implements feedback mechanisms that continuously monitor communication behavior of registered objects against the whitelist criteria. By comparing actual object behavior with expected behavior patterns defined in the whitelist, the system can detect abnormalities such as lost terminals or infected devices while maintaining security restrictions.
2Difficulty of detecting and measuring
If additional monitoring systems are installed to detect abnormalities in whitelisted objects, then abnormality detection capability is improved, but system complexity and cost increase
Solution Approach 1:
The patent applies universality by designing the communication apparatus to perform multiple functions: it maintains the whitelist function for security restrictions while simultaneously monitoring communication behavior to detect abnormalities. This multi-functional approach eliminates the need for separate monitoring systems, reducing overall system complexity and cost.
Solution Approach 2:
The patent merges the whitelist function and abnormality detection function into a single communication apparatus. By combining these functions, the system achieves both security restriction and abnormality detection capabilities without requiring additional separate monitoring systems, thereby reducing system complexity and cost.
Data Source
AI summary
A communication apparatus that transfers received data stores a whitelist to manage an allowed object that is allowed to perform communications via the communication apparatus, comprises: a transfer unit that performs transfer control on the received data based on the whitelist; and a control unit that analyzes behavior related to communications performed by the allowed object. The control unit being configured to calculate a monitoring parameter that indicates the behavior related to the communications performed by the allowed object, and detect the allowed object where an abnormality occurred based on the monitoring parameter.