Automated Device Blocking System for Network Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network management systems face challenges in efficiently identifying and disconnecting undesirable devices, particularly in heterogeneous networks with disparate components, as they are difficult to locate and manage due to their accessible nature, which makes them vulnerable to malicious activity.
Innovation Solution
A system that automates the location and disconnection of undesirable devices by receiving MAC address requests, determining switch information, and issuing commands to reroute traffic, capable of handling various switch capabilities and operating systems, allowing for flexible and efficient disconnection without interrupting other devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If automated location and disconnection system is implemented, then security against undesirable devices is improved, but network complexity increases
Solution Approach 1:
The patent introduces a centralized blocking system as an intermediary component that manages device location and disconnection operations. This mediator coordinates between network switches and undesirable devices, simplifying the overall network architecture by centralizing control logic rather than distributing complex management functions across multiple switches.
Solution Approach 2:
The system performs preliminary actions by pre-configuring blocking rules and maintaining databases of undesirable devices before actual disconnection events occur. This allows the network to respond to security threats with pre-prepared protocols, reducing the complexity of real-time decision-making during actual blocking operations.
2Productivity
If manual device management is used, then network simplicity is maintained, but response time to disconnect undesirable devices increases
Solution Approach 1:
The patent implements feedback mechanisms where the blocking system continuously monitors network conditions, identifies undesirable devices, and automatically executes disconnection protocols. This closed-loop feedback system enables rapid response to security threats without requiring manual intervention, significantly improving response time while maintaining appropriate automation levels.
Solution Approach 2:
The system performs self-service operations by automatically detecting, locating, and disconnecting undesirable devices without requiring manual administrator intervention. The blocking system autonomously manages its own operations, querying switch information, determining blocking ports, and executing disconnection commands independently.
3Adaptability or versatility
If heterogeneous network components are supported, then network versatility improves, but difficulty in locating and managing devices increases
Solution Approach 1:
The blocking system is designed with universal functionality that allows it to communicate with and manage diverse network components from different vendors. It employs standardized protocols and abstracted interface layers that enable the same blocking logic to operate across heterogeneous switches and network infrastructure, maintaining versatility while simplifying device location and management through unified control.
Data Source
AI summary
Automated locating and disconnection of undesired devices may include receiving a request to reroute the traffic associated with a device, receiving switch information from the switch, and using the switch information to determine a candidate reroute port based on the maximum distance from the candidate reroute port to the port coupled to the device associated with the media access control (MAC) address, presence of the candidate reroute port on the inclusion list, and absence of the candidate reroute port from the exclusion list. In addition, a command may be issued to reroute traffic associated with the candidate device to the candidate reroute port by transforming a destination of the traffic to the reroute port.