DLP Server Email Data Transfer Timeout Management

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The challenge lies in managing the transfer of sensitive information to mobile devices, where existing solutions face complexity and cost issues due to the variety of mobile device configurations, and there is a risk of data loss if sensitive information is not properly protected, leading to legal liabilities and reputational damage.

Innovation Solution

A method and apparatus that filter data sets based on mobile device properties, such as model number, operating system, and secure channel status, to prevent sensitive data loss by sending filtered responses in portions to avoid timeouts and ensure secure data transfer, using a DLP server operating in a reverse proxy configuration to intercept and manage email data before it reaches the mobile device.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If DLP software is deployed on each mobile device to protect sensitive data, then data security is improved, but device complexity and implementation cost increase significantly

Engineering Contradiction:
Improvedata securityVSAvoidimplementation complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a server-side intermediary system that acts as a mediator between email servers and mobile devices. This server filters and secures email data before transmission, eliminating the need for complex DLP software on each mobile device while maintaining data security. The intermediary handles sensitive data processing centrally, reducing device-level complexity.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If email data is filtered and processed before sending to mobile devices, then data protection is improved, but data transfer time increases

Engineering Contradiction:
Improvedata protectionVSAvoiddata transfer time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system performs preliminary filtering and security processing of email data on the server side before transmission to mobile devices. By pre-processing data and identifying sensitive content in advance, the system avoids time-consuming filtering operations on mobile devices, thereby reducing overall data transfer time while maintaining protection.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent replaces mechanical client-side filtering mechanisms with server-side processing. This substitution allows for more efficient data handling using centralized resources, reducing the time burden on individual mobile devices and improving overall transfer efficiency while maintaining data protection standards.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

3Productivity

If sensitive information is transferred to mobile devices for business use, then productivity is improved, but risk of data loss increases

Engineering Contradiction:
Improvebusiness productivityVSAvoiddata loss risk
Core Design Contradiction:
ProductivityVSObject-affected harmful factors

Solution Approach 1:

The patent converts the potential harm of mobile device data loss into a benefit by implementing server-side filtering that identifies and protects sensitive information. The system uses the mobile device's connectivity advantage for productivity while neutralizing the data loss risk through automated server-side security measures, effectively transforming the vulnerability into a controlled security enhancement.

Inventive Principle:
Principle #22Blessing in disguise (Convert harm into benefit)

Data Source

PatentUS10135783B2Method and apparatus for maintaining network communication during email data transfer
Publication Date: 2018.11.20 FORCEPOINT LLC
  • US10135783B2 patent drawing
  • US10135783B2 patent drawing
  • US10135783B2 patent drawing

AI summary

Methods and apparatus provide for network communication to be maintained during transfer of email data between two devices. In one aspect a method includes receiving a request via a network connection with a mobile device for email data, determining a network timeout value of the request from the mobile device, producing the email data in response to receiving the request, in parallel with the production of the email data and while the processing of the email data is incomplete, determining an interval less than the network timeout value of the request, and sending a portion of a response to the request over the network connection to the mobile device at the interval, completing the response to the mobile device over the network connection in response to completion of the production of the email data.