Dynamic Session Identifier for Computer Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing computer system security measures, such as firewalls and VPNs, are vulnerable to unauthorized access during transactions and rely on proprietary hardware and software, and fail to effectively distinguish between users once they are identified, leading to exposure to cyber threats.
Innovation Solution
A method and system that dynamically changes the session identifier for each user interaction, using packet management information and session keys to authenticate and authorize access, and filters out unauthorized packets, ensuring secure access to computer system resources.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a static session identifier is used for user authentication, then the authentication process is simple and fast, but the system becomes vulnerable to session hijacking and unauthorized access
Solution Approach 1:
The patent implements dynamic session identifiers that change automatically after each user interaction. Instead of using a static session ID throughout the entire session, the system generates a new session identifier after each transaction or interaction event. This dynamic approach prevents session hijacking and unauthorized access while maintaining the simplicity of the authentication process, as the session management is handled automatically by the server without requiring additional user actions or complex authentication mechanisms on the client side.
2Reliability
If packet management information is inserted into each information packet, then access control and security monitoring are improved, but the network traffic overhead increases
Solution Approach 1:
The patent applies packet management information selectively rather than uniformly to all packets. The system determines whether to insert packet management information based on the specific access control requirements of each resource or transaction type. This localized approach ensures that security monitoring and access control are enhanced for critical resources while minimizing unnecessary overhead for less sensitive transactions, thereby optimizing the balance between security improvement and network bandwidth consumption.
3Reliability
If the session identifier changes with each interaction, then security against unauthorized access is enhanced, but the complexity of session management increases
Solution Approach 1:
The patent implements self-service session management where the server automatically handles the generation, validation, and updating of session identifiers without requiring explicit client involvement. The server maintains the session state and automatically inserts new session identifiers into packets after each interaction, eliminating the need for complex client-side session management logic. This approach enhances security through dynamic session identifiers while keeping the overall system simple by centralizing session management responsibilities in the server.
Data Source
AI summary
A method of packet management for restricting access to a resource of a computer system. The method includes identifying client parameters and network parameters, as a packet management information, used to determine access to the resource, negotiating a session key between client and server devices, generating a session ID based on at least the negotiated session key, inserting the packet management information and the session ID into each information packet sent from the client device to the server device, monitoring packet management information in each information packet from the client device, and filtering out respective information packets sent to the server device from the client device when the monitored packet management information indicates that access to the resource is restricted.