Distributed Sensor Grid for Cybersecurity Mesh Authentication

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Conventional network security systems rely on a single point of entry for authentication, which is not consistently and continually verified, leading to potential security incidents going undetected or unaddressed across a network.

Innovation Solution

A distributed sensor grid within a cybersecurity mesh network that continuously monitors and authenticates devices through intelligent proximity-based clustering, implementing stricter authentication measures when security incidents are detected, ensuring that all devices within a cluster enhance their security protocols to prevent incident spread.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a single firewall is used for initial authentication, then device entry control is achieved, but continuous authentication and security monitoring are insufficient

Engineering Contradiction:

Improvesecurity authentication reliabilityVSAvoidcontinuous monitoring capability

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The patent divides the centralized firewall authentication system into a distributed sensor grid where multiple sensor nodes independently perform authentication and monitoring functions across different network segments, enabling continuous security verification throughout the network

Inventive Principle:

Principle #1Segmentation

2Reliability

If distributed sensor grid is implemented for continuous monitoring, then security detection capability is improved, but system complexity increases

Engineering Contradiction:

Improvesecurity incident detection capabilityVSAvoidnetwork architecture complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

Sensor nodes in the distributed grid perform multiple functions including authentication, monitoring, incident detection, and clustering operations, reducing the need for specialized components and simplifying the overall system architecture despite the distributed nature

Inventive Principle:

Principle #6Universality (Multi-functionality)

Solution Approach 2:

The sensor grid operates autonomously with nodes self-organizing into clusters and performing mutual authentication without centralized control, reducing the complexity of system management and coordination

Inventive Principle:

Principle #25Self-service

3Reliability

If stricter authentication measures are applied to affected devices, then security incident containment is improved, but network operation efficiency decreases

Engineering Contradiction:

Improvesecurity incident containmentVSAvoidnetwork operation efficiency

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The system applies enhanced authentication measures locally only to sensor nodes identified as affected by security incidents or their neighbors, while other nodes continue operating with standard authentication protocols, maintaining overall network efficiency

Inventive Principle:

Principle #3Local quality

Data Source

PatentUS11968215B2Distributed sensor grid for intelligent proximity-based clustering and authentication

Publication Date: 2024.04.23 BANK OF AMERICA CORP

AI summary

Embodiments of the present invention provide a system for monitoring a cybersecurity mesh network comprising a distributed sensor grid and a plurality of devices for detection of one or more security incidents. In response to determining that one of the one or more security incidents has occurred, and in response to receiving the request from an identified device that requires the first level of authentication, transmitting to the identified device a request for authentication credentials that meet a second level of authentication, wherein the second level of authentication is more strict than the first level of authentication.