Hardware Relay Network Access Control Device

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Current network access control methods rely on software solutions, which lack tamper-proof performance and require significant management infrastructure, whereas a hardware-based solution is needed to effectively regulate network access and prevent unauthorized access.

Innovation Solution

A small embedded device with hardware relays is installed inline on an Ethernet cable, using a logic module to regulate network traffic, with a relay opening upon receiving a network-access-denial command, and powered by a battery or Power Over Ethernet, allowing for secure and efficient network access control.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If software solutions are used for network access control, then ease of operation and adaptability are improved, but reliability and tamper-proof performance deteriorate

Engineering Contradiction:

Improveease of operationVSAvoidtamper-proof performance

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The patent replaces software-based access control mechanisms with a hardware-based solution using a dedicated NAC device with relays and packet filters. This hardware substitution eliminates the tamper-proof performance issues of software while maintaining operational effectiveness through physical hardware components that are harder to compromise.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The patent introduces a dedicated NAC device as an intermediary component between the client system and the network. This intermediary hardware device performs access control functions physically, acting as a mediator that enforces security policies through hardware relays and packet filters rather than software processes.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Adaptability or versatility

If software-based network access control is implemented, then adaptability to network policies is improved, but device complexity and management infrastructure requirements increase

Engineering Contradiction:

Improveadaptability to network policiesVSAvoidmanagement infrastructure

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent extracts the access control functionality from complex software systems and concentrates it into a simple dedicated hardware device. By taking out the essential NAC functions and implementing them in hardware, the solution reduces overall system complexity while maintaining policy adaptability through hardware-configurable relays and filters.

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The patent employs a simple, inexpensive hardware device that can be easily deployed and replaced rather than complex software infrastructure. The NAC device uses basic components like relays and packet filters that are cost-effective and require minimal management infrastructure, contrasting with expensive complex software systems.

Inventive Principle:

Principle #27Cheap short-living objects (Disposable)

3Reliability

If hardware-based access control devices are used, then tamper-proof performance and reliability are improved, but device complexity increases

Engineering Contradiction:

Improvetamper-proof performanceVSAvoiddevice complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments the access control function into a separate dedicated NAC device that operates independently from the main network infrastructure. This segmentation isolates the security functions in a simple hardware box with relays and packet filters, avoiding the complexity of integrating security into complex software systems while maintaining tamper-proof performance.

Inventive Principle:

Principle #1Segmentation

4Reliability

If relays are kept closed for continuous monitoring, then security coverage is improved, but network traffic throughput decreases

Engineering Contradiction:

Improvesecurity coverageVSAvoidnetwork traffic throughput

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The patent makes the relay state dynamic rather than static - the relay transitions between closed (for monitoring) and open (for full throughput) states based on security conditions. This dynamic adjustment allows the system to maintain security coverage when needed while enabling full network traffic throughput when security clearance is confirmed, resolving the contradiction between continuous monitoring and traffic productivity.

Inventive Principle:

Principle #15Dynamics

Data Source

PatentUS8161188B2Devices and methods for providing network access control utilizing traffic-regulation hardware

Publication Date: 2012.04.17 CHECK POINT SOFTWARE TECH LTD

AI summary

Disclosed are devices and methods for providing network access control utilizing traffic-regulation hardware, the device including: at least one client-side port for operationally connecting to a client system; at least one network-side port for operationally connecting to a network; a logic module for regulating network traffic, based on device-related data, between the ports, the logic module including: a memory unit for storing and loading the device-related data; and a CPU for processing the device-related data; and at least one relay, between at least one respective client-side port and at least one respective network-side port, configured to open upon receiving a respective network-access-denial command from the logic module. Preferably, the logic module is configured to maintain an open-relay line-rate when at least one relay is open, and to maintain a closed-relay line-rate when at least one relay is closed.