Network Device Quarantine via Autonomous State Conformance

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing communication systems face challenges in efficiently quarantining devices operating in undesired manners, as current methods require extensive computational resources and complex management processes to isolate malfunctioning devices, leading to overhead and potential failures due to unexpected device restarts or incomplete quarantines.

Innovation Solution

Implementing a state-based management system where network devices automatically conform to quarantine states specified by a network manager, reducing the need for detailed instructions and verification processes, allowing devices to independently manage their operation and enforce quarantines without continuous monitoring.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If detailed verification processes are implemented to ensure complete quarantine, then reliability improves, but device complexity and computational resources increase

Engineering Contradiction:
Improvequarantine completenessVSAvoidmanagement process complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements self-service by having the network device automatically conform to the quarantine state when receiving the state update. The device autonomously enforces the quarantine without requiring external verification or detailed instructions from the network manager, thereby simplifying the management process while maintaining reliability through automatic compliance.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The patent extracts the verification process from the quarantine enforcement mechanism. By separating the state update generation from the verification process, the system eliminates the need for complex verification procedures. The network manager simply generates and sends the quarantine state update, while the device independently ensures compliance, removing the burden of verification from the management entity.

Inventive Principle:
Principle #2Taking out (Extraction)

2Reliability

If continuous monitoring is implemented to verify quarantine enforcement, then reliability improves, but use of energy and computational resources increase

Engineering Contradiction:
Improvequarantine enforcement verificationVSAvoidcomputational resources
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The network device performs self-verification by autonomously conforming to the quarantine state and independently managing its own operation. This eliminates the need for continuous external monitoring, as the device itself ensures compliance with the quarantine requirements, significantly reducing computational resources and energy consumption.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The system implements feedback through the state-based management mechanism where the network device automatically adjusts its behavior based on the received quarantine state update. The device provides implicit feedback by conforming to the specified state, eliminating the need for active monitoring and verification while ensuring reliable quarantine enforcement.

Inventive Principle:
Principle #23Feedback

3Manufacturing precision

If detailed instructions are provided for quarantine implementation, then manufacturing precision improves, but device complexity increases

Engineering Contradiction:
Improvequarantine implementation accuracyVSAvoidinstruction complexity
Core Design Contradiction:
Manufacturing precisionVSDevice complexity

Solution Approach 1:

The network device autonomously determines how to conform to the quarantine state without requiring detailed implementation instructions. The device uses its own judgment and capabilities to enforce the quarantine appropriately, which simplifies the instruction set while maintaining precise quarantine implementation tailored to each device's specific characteristics.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The system changes the parameter of instruction detail from high to low by using abstract state descriptions instead of detailed implementation commands. The quarantine state update specifies the desired state without dictating the exact methods, allowing the device to adapt the implementation to its specific configuration while ensuring accurate quarantine enforcement.

Inventive Principle:
Principle #35Parameter changes

4Reliability

If extensive verification processes are used to prevent quarantine failures, then reliability improves, but productivity decreases

Engineering Contradiction:
Improvequarantine failure preventionVSAvoidquarantine execution speed
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The system performs preliminary action by having the network device pre-configured to automatically conform to quarantine states. The device is designed in advance to understand and enforce quarantine requirements without requiring verification during the process, enabling rapid quarantine execution while maintaining reliability through pre-established compliance mechanisms.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The network device independently ensures quarantine compliance without external verification, achieving both high reliability and fast execution. The device's autonomous nature eliminates the time-consuming verification processes while maintaining failure prevention through self-enforcement of the quarantine state.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS11736500B2System and method for device quarantine management
Publication Date: 2023.08.22 ARISTA NETWORKS INC
  • US11736500B2 patent drawing
  • US11736500B2 patent drawing
  • US11736500B2 patent drawing

AI summary

A network manager manages a network topology. The network manager includes storage for storing a signature of a network device of the network topology. The network manager also includes a device state manager that obtains a signature of a device that participates in the network topology, the signature indicating that the device is operating in an undesired manner; makes a determination, based on signature, that the device should be in a quarantined state; in response to making the determination: generates a quarantine state update that indicates that the device is in the quarantined state; and sends, by the network manager, the quarantine state update to the device. The quarantine state update does not indicate how the quarantined state is implemented.