Expert System Parameter Calculation for Telecommunications Network Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing telecommunications networks face challenges in ensuring the security and guaranteed behavior of communicating devices, particularly in complex environments like large companies and critical systems, where frequent changes and varied device configurations can lead to security breaches and malfunctions.
Innovation Solution
A method that uses an expert system to calculate parameters for communicating devices based on formal descriptions of their behavior and security goals, ensuring secure assembly and operation of networks by guaranteeing access control, confidentiality, integrity, and authenticity, and providing certification of achieved goals.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional security verification methods are used for communicating devices, then security level is improved, but device complexity and cost increase
Solution Approach 1:
The patent replaces physical/tangible verification mechanisms with cryptographic and information-theoretic methods. Specifically, it uses secret sharing schemes where security parameters are distributed as mathematical secrets rather than physical security tokens, eliminating the need for complex physical verification infrastructure while maintaining security guarantees.
Solution Approach 2:
The invention transforms security verification from a complex procedural process into a mathematical parameter distribution problem. By changing the nature of security parameters from physical tokens to mathematical secrets that can be distributed and reconstructed, the system achieves high security with simpler device configurations and verification processes.
2Reliability
If formal verification of device behavior is implemented, then security goals are improved, but implementation cost and complexity increase
Solution Approach 1:
The patent creates virtual copies of security verification through mathematical models and simulations. Instead of physically verifying each device configuration, the system uses formal mathematical descriptions that can be copied and validated computationally, dramatically reducing verification costs while maintaining rigorous security guarantees.
Solution Approach 2:
The invention substitutes expensive physical verification processes with computational mathematics. Formal verification becomes a matter of mathematical proof rather than physical testing, eliminating the need for costly certification laboratories and expert reviewers while achieving equivalent or superior security assurance.
3Reliability
If network security is strengthened through multiple verification layers, then security is improved, but operation speed and simplicity deteriorate
Solution Approach 1:
The patent performs security verification in advance during device initialization and parameter distribution. By pre-distributing secret parameters and establishing verification mechanisms before network operations begin, the system ensures security without adding overhead to subsequent operations, maintaining both high security and fast operation speed.
Solution Approach 2:
The invention replaces multi-layer physical verification with a single layer of mathematical verification. Cryptographic proofs and secret sharing reconstruction provide comprehensive security in one computational step rather than requiring multiple sequential verification layers, dramatically simplifying operations while maintaining security.
Data Source
AI summary
The invention relates to a method for protecting assets used by certified communication devices connected to networks, and for guaranteeing the behavior of said devices, which consists of calculating parameters intended for said devices, by means of an expert system, in order to program the behavior thereof and ensure the protection of said assets, according to known objectives.