Credential-Verified Network Device Hides From Scanners
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current network security protocols, such as TCP, are vulnerable to hacker scans due to the 3-way handshake mechanism, which allows hackers to identify accessible devices and open ports, enabling malicious activities like data theft.
Innovation Solution
A system that uses a combination of UDP and TCP protocols to verify credentials within packets, where only properly authenticated devices receive acknowledgments, while unauthorized packets are dropped, effectively hiding the presence of target devices from hackers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If TCP 3-way handshake is used to establish connections, then reliable data delivery is ensured, but network security is compromised as hackers can identify accessible devices
Solution Approach 1:
The patent introduces an intermediary credential verification step between the initiating packet and the acknowledgment response. The receiving device checks credentials embedded in packets before responding, acting as a mediator that filters out unauthorized scan attempts while allowing legitimate connections to proceed with reliable data delivery.
2Object-affected harmful factors
If UDP protocol is used to avoid handshake vulnerabilities, then network security is improved, but data reliability and ordering are lost
Solution Approach 1:
The patent merges the credential verification mechanism from UDP (which prevents unwanted responses) with the reliable acknowledgment system of TCP. By embedding credentials in UDP-style packets and requiring verification before sending TCP-style acknowledgments, it combines the security benefits of UDP with the reliability of TCP.
3Object-affected harmful factors
If credentials are verified for every incoming packet, then network security is enhanced, but device complexity increases
Solution Approach 1:
The patent applies partial verification by checking credentials only on initiating packets that trigger connection attempts, rather than verifying every single packet. This selective approach provides sufficient security against scan attacks while avoiding the excessive complexity of verifying all packets.
Data Source
AI summary
A system for and method of securing a network are described herein. A receiving device listens for packets with proper credentials. If a transmitting device sends the correct credentials, the receiving device will respond with an acknowledgment and further data is able to be transmitted. However, if the transmitting device does not send a packet with the proper credentials, then the receiving device will drop the packet and not respond. Thus, the transmitting device will be unaware of the presence of the receiving device, in particular when hackers are using scanning software to locate target devices.