Dynamic Resource Replication for Unauthorized Access Detection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current deception technologies lack an effective secure access control framework that utilizes dynamic resource replication to detect and mitigate unauthorized access efficiently.

Innovation Solution

A system that includes a processing device configured to receive user requests, determine resource requirements and authentication levels, initiate a resource replication engine to generate legitimate and decoy resource access paths, and monitor changes in path states to detect unauthorized access, using machine learning algorithms to skew distribution parameters for access control enforcement.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If deception technologies generate replicate resource access paths to detect unauthorized access, then detection capability is improved, but system complexity increases

Engineering Contradiction:
Improvedetection capabilityVSAvoidsystem complexity
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The patent creates replicate resource access paths that are copies of legitimate access paths. These replicas include decoy resources that mimic real resources, allowing the system to detect unauthorized access attempts without requiring complete system redesign. The copying principle enables detection capability improvement while keeping complexity manageable by replicating only essential access path characteristics.

Inventive Principle:
Principle #26Copying

Solution Approach 2:

The access control system is segmented into multiple independent components: legitimate resource access paths, replicate resource access paths, and decoy resources. This segmentation allows each component to be managed separately, reducing overall system complexity while maintaining enhanced detection capabilities through the distributed replicate paths.

Inventive Principle:
Principle #1Segmentation

2Reliability

If dynamic resource replication is implemented to create multiple access paths, then security detection is improved, but resource consumption increases

Engineering Contradiction:
Improvesecurity detectionVSAvoidresource consumption
Core Design Contradiction:
ReliabilityVSQuantity of substance

Solution Approach 1:

The system implements partial replication by creating only the necessary replicate resource access paths and decoy resources required for detection, rather than replicating entire system resources. This partial action approach provides sufficient security detection capability while minimizing resource consumption by replicating only essential access path elements.

Inventive Principle:
Principle #16Partial or excessive action

Solution Approach 2:

The patent dynamically adjusts the parameters of replicate resource access paths based on authentication levels and resource requirements. By changing parameters such as replication intensity and decoy resource allocation according to user authentication levels, the system optimizes the balance between security detection reliability and resource consumption.

Inventive Principle:
Principle #35Parameter changes

3Measurement precision

If replicate resource access paths are generated for all resources, then unauthorized access detection is improved, but processing time increases

Engineering Contradiction:
Improveunauthorized access detectionVSAvoidprocessing time
Core Design Contradiction:
Measurement precisionVSLoss of time

Solution Approach 1:

The system performs preliminary actions by pre-establishing replicate resource access paths and decoy resources before unauthorized access attempts occur. This preliminary setup allows the system to immediately detect and respond to access attempts without requiring real-time analysis, thereby reducing processing time while maintaining high detection precision.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent implements dynamic resource replication where the generation and maintenance of replicate access paths is adjusted based on real-time conditions such as user authentication levels and resource requirements. This dynamic approach ensures that replicate paths are created only when necessary, optimizing the balance between detection precision and processing time by avoiding unnecessary replication for low-risk scenarios.

Inventive Principle:
Principle #15Dynamics

Data Source

PatentUS11983254B2Secure access control framework using dynamic resource replication
Publication Date: 2024.05.14 BANK OF AMERICA CORP
  • US11983254B2 patent drawing
  • US11983254B2 patent drawing
  • US11983254B2 patent drawing

AI summary

Systems, computer program products, and methods are described herein for secure access control using dynamic resource replication. The present invention is configured to electronically receive, from a computing device of a user, a request to generate a resource access path to access a resource; determine one or more resource requirements associated with the resource; determine an authentication level associated with the user; initiate a resource replication engine on the one or more resource requirements and the authentication level associated with the user; determine, using the resource replication engine, that the one or more requirements and the authentication level associated with the user meets one or more conditions for a replication process; and generate, using the resource replication engine, the resource access path and a plurality of replicate resource access paths.