Dynamic Authorized Access List for Network Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current network security systems face challenges in ensuring efficient protection against cyberattacks and unauthorized access, particularly when legitimate users frequently need to authenticate and when external connections are open, making them vulnerable to hacker exploits.
Innovation Solution
An authorized access list generation method is implemented, using an authentication and authorization server to continuously update IP addresses and device IDs for legitimate user devices, allowing legitimate access while blocking malicious attempts by maintaining a dynamic authorized access list.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If account and password authentication is required for every user access, then information security is improved, but user convenience deteriorates due to frequent authentication requirements
Solution Approach 1:
The system performs preliminary authentication and authorization actions when a user first accesses the network service. The authentication server pre-establishes an authorized access list containing the user's device ID and IP address before the user needs to access services repeatedly. This preliminary setup eliminates the need for frequent re-authentication while maintaining security.
Solution Approach 2:
The authentication server continuously monitors and updates the authorized access list with feedback about user device information. When a user accesses the network service, the system provides feedback by updating the authorized access list with the current device ID and IP address, enabling seamless subsequent accesses without re-authentication while maintaining security through continuous validation.
2Adaptability or versatility
If the network service providing device is open to external connections, then accessibility is improved, but security deteriorates due to vulnerability to hacker exploits
Solution Approach 1:
The authentication server acts as an intermediary between user devices and the network service providing device. Instead of the service device directly trusting external connections, it queries the authentication server through the authorized access list to verify each connection request. This intermediary validation mechanism enables open accessibility while maintaining security by filtering out unauthorized access attempts.
Solution Approach 2:
The system performs preliminary verification of device authorization before allowing network access. The authentication server pre-validates device IDs and IP addresses against the authorized access list, and the network service providing device checks this list before accepting connections. This preliminary action prevents hackers from exploiting open connections while allowing legitimate users accessible access.
3Measurement precision
If the authorized access list is manually updated, then accuracy is improved, but efficiency deteriorates due to manual intervention requirements
Solution Approach 1:
The authentication server automatically maintains and updates the authorized access list without manual intervention. When users access the network service, their device information is automatically added to or updated in the authorized access list by the authentication server itself. This self-service mechanism ensures accuracy by continuously reflecting actual user device information while dramatically improving efficiency by eliminating manual updates.
Solution Approach 2:
The system implements automatic feedback loops where the authentication server continuously monitors user access patterns and automatically updates the authorized access list accordingly. This feedback mechanism ensures the list remains accurate by reflecting current device information while improving efficiency through automated maintenance rather than manual intervention.
4Reliability
If IP address tracking is continuous, then security is improved by preventing IP spoofing, but system complexity increases due to continuous monitoring requirements
Solution Approach 1:
The authentication server serves as an intermediary that handles continuous IP address tracking and monitoring. Instead of the network service providing device performing complex continuous monitoring itself, it queries the authentication server which maintains the authorized access list and provides verification services. This intermediary approach improves security through continuous IP tracking while reducing the complexity burden on the service device.
Solution Approach 2:
The authentication server performs multiple functions including user authentication, authorization list maintenance, and IP address tracking within a single system component. This multi-functional design improves security through comprehensive IP monitoring while avoiding the need for separate complex monitoring systems, thereby managing overall system complexity effectively.
Data Source
AI summary
An authorized access list generation method including: at least one network service providing device registering for an authorized access list notification service with a server, the authorized access list including at least one authorization related record of at least one legitimate user device; the legitimate user device outputting a user ID to the server to log into the server, and directly sending an access request to a target network service provider after logging into the server, and continuing to provide an IP address being used and a device ID to the server to update a corresponding authorization related record; and the target network service providing device comparing the IP address, stored in each authorization related record of the authorized access list, with the IP address of a user device issuing an access request, and rejecting the access request if no matched result is found.