Dynamic Network Connections for Data Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional network systems face vulnerabilities in data leakage and unauthorized access due to compromised network devices, as they lack mechanisms to detect and prevent malicious activities, especially when connected to data storing devices like databases and file repositories.
Innovation Solution
Implementing dynamic network connections between network devices and data storing devices, where connections are created on demand and controlled by an access controller, ensuring that compromised devices cannot establish connections without authentication, thereby enhancing security and access control.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If constant connections are used between network devices and data storing devices, then data exchange efficiency is improved, but network security deteriorates due to vulnerability to compromised devices
Solution Approach 1:
The patent implements dynamic network connections that are created on-demand between network devices and data storing devices, replacing static constant connections. The connection status changes from permanent to temporary, existing only when needed for data exchange. This dynamic approach allows the system to maintain security by terminating connections after use, preventing compromised devices from maintaining persistent access to data storing devices.
Solution Approach 2:
The patent introduces an access controller as an intermediary component that manages and mediates connections between network devices and data storing devices. The access controller authenticates network devices before granting connection permissions and monitors connection status. This intermediary layer provides security oversight without preventing legitimate data exchange, resolving the contradiction between security and efficiency.
2Ease of operation
If data storing devices are readily accessible to network devices, then ease of data access is improved, but vulnerability to unauthorized access and malicious activities increases
Solution Approach 1:
The patent implements preliminary authentication and connection establishment actions through the access controller before network devices can access data storing devices. The access controller pre-approves connections by authenticating network devices and establishing authorized communication channels. This preliminary security measure ensures that only authenticated devices can access data storing devices, preventing unauthorized access while maintaining ease of operation for legitimate users.
Solution Approach 2:
The access controller serves as an intermediary that manages access between network devices and data storing devices. It authenticates devices, establishes authorized connections, and monitors data exchange activities. This intermediary layer maintains ease of operation for legitimate access while blocking unauthorized access attempts, resolving the contradiction between accessibility and security.
3Speed
If network devices can freely communicate with data storing devices, then communication efficiency is improved, but ability to detect compromised devices deteriorates
Solution Approach 1:
The patent implements feedback mechanisms through the access controller that monitors communication between network devices and data storing devices. The access controller receives connection requests, authenticates devices, and provides feedback on connection status and data exchange activities. This feedback loop enables the system to detect anomalies and compromised devices by monitoring communication patterns, maintaining communication efficiency while improving detection capability.
Solution Approach 2:
The access controller acts as an intermediary that monitors and manages communication between network devices and data storing devices. By routing communications through this intermediary, the system can detect compromised devices through authentication checks and connection monitoring without significantly impacting communication speed for legitimate devices.
Data Source
AI summary
A system that includes a network device, an access controller, and a data vault. The network device is configured to receive a first tokenized sub-string, combine a second tokenized sub-string with the first tokenized sub-string to generate an initiation token, and send the initiation token to the access controller. The access controller is configured to validate the initiation token and to send connection information comprising a connection identifier to the network device and send a post-action verification token to a data vault in response to validating the initiation token. The network device is further configured to send a network connection request comprising the connection identifier to the data vault. The data vault is configured to receive the network connection request, determine that the post-action verification token linked the connection identifier has been received, establish a network connection with the network device, and exchange data with the network device.