Network Gateway Routing for Blocking Vulnerable Device Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing networks lack effective mechanisms to manage and block access of vulnerable devices, allowing them to connect to public networks without addressing their vulnerabilities, potentially compromising network security.
Innovation Solution
A system and method that identifies vulnerable devices through identifiers like IMSI, updates their gateway designation to a static status, routes them to a blocked gateway, and provides a corrective action splash page to address vulnerabilities before reallowing network access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If vulnerable devices are allowed to access the public network without restrictions, then network accessibility and user convenience are improved, but network security and system reliability deteriorate due to potential compromises from vulnerable devices
Solution Approach 1:
The patent segments the network gateway functionality into multiple specialized gateways: a public network gateway for normal access and a blocked gateway for vulnerable devices. The system dynamically assigns devices to appropriate gateways based on their security status, isolating vulnerable devices from the public network while maintaining separate infrastructure for each type of traffic
Solution Approach 2:
The patent introduces an intermediary component (the network manager or gateway controller) that mediates between vulnerable devices and the public network. This intermediary monitors device security status, enforces gateway assignment policies, and manages the splash page delivery mechanism, acting as a buffer that prevents direct access while maintaining controlled interaction
2Device complexity
If all devices are routed through the same gateway, then device complexity and network configuration are reduced, but network performance and speed deteriorate due to increased latency and network load from vulnerable devices
Solution Approach 1:
The patent divides the gateway processing load by creating separate gateway instances for different device types. Normal devices are routed to the public network gateway while vulnerable devices are routed to the blocked gateway, effectively segmenting the network traffic flow and preventing vulnerable devices from consuming resources that would affect overall network performance
Solution Approach 2:
The patent applies different gateway quality characteristics to different device groups. The public network gateway is optimized for high-speed access with full network capabilities, while the blocked gateway is specifically configured for vulnerable devices with restricted access and splash page delivery functionality, ensuring each gateway operates at optimal performance for its intended purpose
Data Source
AI summary
Systems and methods are provided for managing public network access for devices that are identified as vulnerable devices. Devices may be identified as vulnerable devices based on an identifier associated with a vulnerable status, such as an international mobile subscriber identity (IMSI). Once identified as vulnerable, the network blocks the vulnerable device from accessing the public network (e.g., Internet) by routing the vulnerable device to a designated gateway that is blocked from accessing the public network. The designated gateway provides the vulnerable device with a splash page indicating a corrective action to be taken in order to regain access to the public network.