Automated Device Blocking Tool for Network Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Large networks face challenges in identifying and blocking compromised devices that can connect and disconnect quickly, compromising network security due to their size and complexity, allowing malicious activities such as data theft and malware spread.
Innovation Solution
A device blocking tool that uses a user interface, location engine, and connection engine to identify devices by MAC and IP addresses, determine connection types, and block compromised devices from reconnecting by updating access control lists on switches and wireless LAN controllers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual monitoring and blocking methods are used in large networks, then network security can be maintained in small networks, but the ability to identify and block compromised devices quickly deteriorates due to network size and complexity
Solution Approach 1:
The patent replaces manual monitoring and blocking operations with an automated system that uses a location engine to identify compromised devices and a connection engine to block them automatically. The system substitutes human-operated mechanical processes with automated electronic systems that can rapidly process network data, track device locations across multiple switches and VLANs, and enforce blocking actions without manual intervention, thereby maintaining security while dramatically improving response speed in large networks
Solution Approach 2:
The system enables self-service by automatically detecting compromised devices, determining their location through network infrastructure (switches, VLANs), and blocking them without requiring manual security personnel intervention. The automated location engine and connection engine work together to independently identify and neutralize threats, allowing the network security system to serve itself in real-time rather than relying on external manual operations
2Productivity
If automated location tracking and blocking systems are implemented, then the speed of blocking compromised devices improves, but the device complexity and infrastructure requirements increase
Solution Approach 1:
The patent applies universality by designing a blocking system that can operate across multiple network infrastructures simultaneously - it works with various switches, VLAN configurations, and network topologies through a unified interface. The location engine and connection engine are designed to be infrastructure-agnostic, allowing the same system to block devices regardless of which specific switch or VLAN they are connected to, thereby reducing the need for multiple specialized systems and simplifying overall device complexity despite the enhanced blocking capability
Data Source
AI summary
A device blocking tool includes a user interface, a location engine, and a connection engine. The user interface receives at least one of a MAC address of a device and an IP address of the device. The location engine communicates a query to an access control server, receives a response, and determines, based on the response, that the device connected to a network through a wired connection. In response to a determination that the device connected through the wired connection, the location engine determines a switch through which the device connected. The location engine also determines a VLAN through which the device connected and determines, based on a type associated with the VLAN, that the device is an IP telephone. The connection engine connects to the determined switch in response to the determination that the device connected through the wired connection.