Off-Peak Encrypted Data Provisioning with Endpoint Authentication

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

There is a need for a secure and efficient way to provision electronic data to endpoint devices, particularly during peak network traffic times, while ensuring data security and reducing the computational load on centralized servers.

Innovation Solution

A system utilizing an intelligent monitoring engine to analyze data request patterns and transmit encrypted data to endpoint devices during off-peak times, coupled with an unauthorized activity monitor to ensure only authorized access and decryption of the data.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Speed

If encrypted data is transmitted to endpoint devices during peak network traffic times, then data provisioning speed is improved, but network congestion and server computational load increase

Engineering Contradiction:

Improvedata provisioning speedVSAvoidnetwork congestion and server load

Core Design Contradiction:

SpeedVSObject-generated harmful factors

Solution Approach 1:

The system performs preliminary actions by transmitting encrypted data to endpoint devices during off-peak hours before the actual data access needs occur. The intelligent monitoring engine analyzes historical access patterns to predict when data will be needed, and provisions the encrypted data in advance during periods of low network traffic, thereby avoiding network congestion and server overload during peak times while still meeting data provisioning requirements.

Inventive Principle:

Principle #10Preliminary action

2Speed

If data is stored locally on endpoint devices, then data access speed is improved, but data security risks increase

Engineering Contradiction:

Improvedata access speedVSAvoiddata security

Core Design Contradiction:

SpeedVSReliability

Solution Approach 1:

The system creates an encrypted copy of the data and transmits it to the endpoint device for local storage and access. The original data remains secure on the server, while the encrypted copy provides fast local access. The unauthorized activity monitor continuously checks for suspicious behavior, and only authorized users can obtain decryption keys, thereby maintaining security while enabling rapid data access from the local endpoint device.

Inventive Principle:

Principle #26Copying

Solution Approach 2:

The system introduces an intermediary layer of encryption between the stored data and the accessible data. The encrypted data can be safely stored locally on the endpoint device, but the actual plaintext data remains protected on the server. The unauthorized activity monitor acts as another intermediary that mediates access control, allowing fast local access while maintaining security through multiple layers of protection.

Inventive Principle:

Principle #24Intermediary (Mediator)

3Reliability

If centralized servers handle all data processing, then data security is maintained, but computational load and response time worsen

Engineering Contradiction:

Improvedata securityVSAvoidcomputational efficiency

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The system segments the data processing architecture by separating data storage and decryption functions from centralized servers and distributing them to endpoint devices. The server retains security-critical functions (data encryption, key management, unauthorized activity monitoring), while endpoint devices handle data storage and local access operations. This segmentation reduces the computational burden on centralized servers and improves overall system productivity while maintaining security through the distributed architecture.

Inventive Principle:

Principle #1Segmentation

4Reliability

If user authentication is strictly enforced, then data security is improved, but user convenience and access speed decrease

Engineering Contradiction:

Improvedata securityVSAvoiduser convenience

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The system performs preliminary authentication and establishes user credentials in advance. The unauthorized activity monitor continuously monitors user behavior patterns and maintains a baseline of authorized activity. Once a user is authenticated and their behavior pattern is established, subsequent access decisions are made automatically based on the pre-established baseline, reducing the need for repeated strict authentication while maintaining security. This preliminary action enables both strong security and user convenience.

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS12452061B2System and method for distributed and authenticated provisioning of encrypted electronic data

Publication Date: 2025.10.21 BANK OF AMERICA CORP

AI summary

A system is provided for distributed and authenticated provisioning of encrypted electronic data. In particular, the system may comprise an intelligent monitoring engine that may continuously monitor and log actions and/or requests executed by an endpoint device to identify one or more data request patterns associated with the endpoint device. Based on identifying the data request patterns, the system may transfer encrypted electronic data to the endpoint device for storage, where the encrypted electronic data may be configured with a time to live on the endpoint device. The system may further comprise an unauthorized activity monitor that may monitor the actions taken by the endpoint device to detect potentially unauthorized activity involving the endpoint device. If no unauthorized activity is detected, the system may permit the endpoint device to decrypt the encrypted electronic data to be presented to a user.