Gateway Data Clutch for Unmatched Network Resources
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current network security methods face challenges in balancing access to unfamiliar resources from outside networks while maintaining security, as they often require compromising on performance or administrative burdens, and fail to effectively manage interactions with unmatched network resources.
Innovation Solution
Implementing a data clutch process that involves a gateway comparing resource identifiers against lists of allowed and blocked resources, initiating a manual authorization process for unmatched resources, and updating an authorization layer to categorize and manage access, thereby balancing access and security without increasing processing overhead or administrative costs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If filtering and web security applications are installed on individual machines, then network security is improved, but machine performance deteriorates and administrative complexity increases
Solution Approach 1:
The patent introduces a gateway server as an intermediary between the browser and web resources. The gateway intercepts HTTP requests, checks them against allowed and blocked lists, and forwards approved requests. This moves the security filtering function from individual machines to a centralized gateway, improving machine performance while maintaining security.
2Reliability
If filtering and web security applications are installed on individual machines, then network security is improved, but administrative complexity increases
Solution Approach 1:
The patent consolidates security management functions into a centralized gateway server that maintains allowed and blocked lists. Instead of managing security applications on each individual machine, administrators manage a single gateway system, significantly reducing administrative complexity while maintaining comprehensive security coverage.
3Reliability
If whitelist and blacklist approaches are used, then some security gains are achieved, but continuous updates are required and unmatched resources cannot be handled
Solution Approach 1:
The patent implements a data clutch mechanism that proactively handles unmatched resources by pausing execution and requiring explicit user authorization before accessing resources not in the allowed or blocked lists. This preliminary action prevents potential security issues before they occur, rather than requiring continuous reactive updates to whitelist and blacklist.
4Reliability
If data clutch process with manual authorization is implemented, then security control over unmatched resources is improved, but processing time increases
Solution Approach 1:
The patent applies manual authorization selectively only to unmatched resources that fall outside the allowed and blocked lists. Resources in the allowed list pass through automatically without manual intervention. This partial application of the data clutch mechanism maintains security control for unknown resources while minimizing processing time delays for known safe resources.
Data Source
AI summary
A method includes at a first electronic device, receiving at a browser, a first request for data, wherein the first request includes a first identifier of a location of the data on a network, passing the first request from the browser to a gateway, performing, by the gateway, a comparison of the first identifier against items of a first list and items of a second list. When the identifier is not an item of the first list or an item of the second list, initiating, by the gateway, a data clutch including sending from the gateway to a trusted device, a request for manual authorization to be displayed by the browser, receiving, from the trusted device, manual authorization, passing, an approval request to an authorization layer, and receiving, by the browser, an approval from the authorization layer in response to the approval request, and obtaining the requested data.