Compartmentalized Network System Security via Proxy Mediation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current system security methods are insufficient for protecting computing systems from unauthorized access and data breaches, especially in untrusted networks like the Internet, as they lack robust access controls, intrusion detection, and secure data passage mechanisms.
Innovation Solution
A compartmentalized network computer system design with logical compartments and a Common Criteria Certified operating system, utilizing monitoring functions, intrusion detection, system health monitoring, and integrity checking to limit access and prevent unauthorized modifications, ensuring secure data passage from untrusted networks to secure computing environments.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional system security methods are used, then system access control is maintained, but security against unauthorized access and data breaches on untrusted networks is insufficient
Solution Approach 1:
The patent implements segmentation by creating separate server compartments (outside server, proxy server, inside server) that are isolated from each other. Each compartment has its own access control list (ACL) and can only communicate with adjacent compartments through defined interfaces. This segmentation prevents unauthorized access by limiting the spread of malicious code and data breaches within the network system.
Solution Approach 2:
The patent introduces a proxy server as an intermediary component between the outside server (untrusted network) and the inside server (secure computing environment). The proxy server acts as a mediator that reads and executes data from the outside server while writing to the inside server, providing a safe passage for data transmission and preventing direct exposure of the secure environment to untrusted networks.
2Reliability
If Common Criteria Certification is achieved through duplication of hardware, software, server compartments, vendors and software languages, then security certification is obtained, but device complexity and cost increase significantly
Solution Approach 1:
The patent merges multiple server compartments (outside server, proxy server, inside server) and their associated security functions into a single integrated network computer system with a Common Criteria Certified operating system. Instead of duplicating hardware, software, and server compartments across multiple vendors and languages, the invention combines these elements into one unified system that achieves security certification without the complexity of multiple separate systems.
Solution Approach 2:
The patent implements universality by creating a multi-functional server compartment structure where a single network computer system can perform multiple security functions (access control, intrusion detection, data transmission, monitoring) that would traditionally require separate systems. The operating system provides universal support for these functions through integrated mechanisms, reducing the need for multiple specialized components.
3Reliability
If monitoring functions read and execute data from multiple servers including outside, proxy, and inside servers, then continuous security monitoring is achieved, but system resource consumption increases
Solution Approach 1:
The patent implements preliminary action by having the monitoring function read and execute data from servers in a predetermined sequence and hierarchy. The monitoring function first reads from the outside server, then executes data through the proxy server, and finally writes to the inside server. This staged approach allows continuous monitoring while minimizing resource consumption by processing data at each stage rather than simultaneously accessing all servers.
Data Source
AI summary
A network computer system for providing security that includes a monitoring function for the network computer system utilizing compartments that can be logical or separate physical hardware, at least one outside server for an untrusted computer network, e.g., global computer system, at least one proxy server, at least one inside server, wherein the at least one outside server is able to read and write software code to the at least one proxy server and the at least one proxy server is able to read and write software code to the at least one inside server, wherein the monitoring function can read and execute software code from the at least one outside server, the at least one proxy server and the at least one inside server. There is a top/down security function to prevent access to higher compartments.