Gate Component for Malicious Code Interception

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing security measures are inadequate in preventing malicious programs from causing harm, as they fail to reliably detect and restrict code disguising methods, allowing attacks through phishing websites or unauthorized access.

Innovation Solution

A processing system that includes a reception module, an addition module, and an alteration module to receive, add, and alter programs with specific keywords or syntax, redirecting harmful processes to a gate component, thereby restricting malicious activities regardless of code disguise.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If code disguise methods are used to evade detection, then the malicious program can bypass security checks, but the security system cannot reliably detect and restrict the malicious code

Engineering Contradiction:
Improvesecurity detection reliabilityVSAvoidcode analysis complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a gate component as an intermediary between the code execution and the system. The gate component intercepts all code execution requests, analyzes them for malicious patterns, and decides whether to allow execution. This mediator approach enables reliable security detection without requiring the security system to directly analyze and understand all possible code disguise methods, thus resolving the contradiction between detection reliability and analysis complexity.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If all possible code disguising methods are considered for detection, then security coverage is improved, but the security system becomes impractical due to the countless number of disguise methods

Engineering Contradiction:
Improvesecurity coverageVSAvoiddetection system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent extracts the security analysis function into a separate gate component that operates independently from the main code execution flow. The gate component focuses specifically on detecting malicious patterns and characteristics, while the rest of the system continues to execute legitimate code. This extraction allows the security system to specialize in detection without needing to handle all possible disguise methods comprehensively, making the system practical while maintaining good security coverage.

Inventive Principle:
Principle #2Taking out (Extraction)

3Reliability

If a gate component is added to restrict malicious processes, then user and system protection is improved, but the program processing complexity increases

Engineering Contradiction:
Improveuser and system protectionVSAvoidprogram processing complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The gate component performs preliminary analysis and decision-making before the actual code execution takes place. By pre-establishing security rules, patterns, and decision criteria in the gate component, the system can quickly evaluate code requests without complex analysis during execution. This preliminary action approach provides strong user and system protection while keeping the processing complexity manageable through pre-computed security policies.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS10754944B2Processing system, and processing method and program
Publication Date: 2020.08.25 TAKEDA YUTA
  • US10754944B2 patent drawing
  • US10754944B2 patent drawing
  • US10754944B2 patent drawing

AI summary

To reliably protect users or systems from a program prepared by a malicious developer. Provided is a processing system configured to process a program transmitted from outside through a wired or wireless network. The processing system includes: a reception module configured to receive the program; an addition module configured to add to the program a gate component that restricts a process of attacking a user or the system; and an alteration module configured to alter, in the program, a code having a certain keyword or syntax to change a destination to be referred to by the code having the keyword or syntax to the gate component.