Endpoint Compliance Updates for Low-Bandwidth Network Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional network control devices inefficiently manage policy compliance checks, leading to excessive processing and bandwidth usage, particularly in large private networks, due to separate and unrelated L2 and L3 authentication and authorization processes, and unnecessary data transmission for compliance evaluation.
Innovation Solution
A network appliance cooperates with a client on user devices to request and store full compliance data, monitor changes, and transmit only updated compliance information, reducing data transmission volume and resource consumption by evaluating compliance based on both stored and updated data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If full compliance information is requested and transmitted during each access request, then complete policy compliance can be verified, but network bandwidth consumption increases and processing time increases
Solution Approach 1:
The patent extracts only the essential compliance information needed for verification from the complete compliance dataset. Instead of transmitting all compliance details during each access request, the system identifies and transmits only the specific compliance attributes required for policy evaluation, thereby reducing bandwidth consumption while maintaining verification accuracy.
Solution Approach 2:
The patent performs preliminary compliance information collection and storage before actual access requests occur. Compliance information is gathered and cached in advance, allowing subsequent access requests to utilize pre-prepared data rather than requiring complete re-transmission, thus reducing repeated bandwidth consumption.
2Reliability
If complete compliance information is transmitted with each access request, then accurate policy compliance can be determined, but processing time increases
Solution Approach 1:
The system extracts only the necessary compliance attributes required for policy verification from the complete compliance information set. By identifying and processing only the relevant compliance data points needed for evaluation, the system reduces processing time while maintaining accurate compliance determination.
Solution Approach 2:
Compliance information is collected, validated, and stored in a readily accessible format before access requests occur. This preliminary preparation allows the compliance evaluation system to quickly retrieve and process compliance data during actual access requests, significantly reducing processing time.
3Productivity
If compliance information is stored for all endpoint devices, then updated compliance can be evaluated efficiently, but memory resources increase
Solution Approach 1:
The system extracts and stores only the essential compliance information attributes required for policy evaluation rather than maintaining complete compliance datasets for all endpoint devices. This selective storage approach reduces memory consumption while preserving the ability to perform efficient compliance updates and evaluations.
4Reliability
If all compliance information is transmitted from endpoint devices, then complete policy requirements can be assessed, but network congestion increases
Solution Approach 1:
The system extracts and transmits only the specific compliance information elements required for policy assessment rather than transmitting complete compliance datasets. This selective transmission reduces network traffic volume and congestion while maintaining the completeness of policy compliance assessment by including all necessary evaluation criteria.
Solution Approach 2:
Compliance information is prepared, validated, and organized in advance before transmission requests occur. This preliminary action allows the system to efficiently package and transmit only the necessary compliance data during access requests, reducing network traffic volume and congestion while ensuring complete policy assessment capability.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The techniques described herein relate to authorizing networked devices to access protected network zones and/or network resources in a private network. In response to a first access request, a network appliance requests full compliance information from the networked device. The received compliance information is stored in a database. Subsequently, when the compliance information on the networked device changes, the network device sends updated compliance information to the network appliance. The network appliance reevaluates the compliance state of the networked device based on the updated compliance information and the compliance information stored in the database.