Hidden Server Intercepts Requests to Protect Visible Systems

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing network security systems are vulnerable to attacks as they lack effective mechanisms to silently monitor and respond to data requests without compromising the integrity of visible servers, leading to potential security breaches.

Innovation Solution

Implementing a hidden server that silently monitors communication between clients and visible servers, selectively responds to authorized requests, and employs a segmentation policy to reduce the attack surface by differing in hardware and software configurations from visible servers, thereby intercepting and fulfilling requests transparently.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If a visible server is used to handle data requests, then service availability and client accessibility are improved, but the server becomes vulnerable to attacks and security breaches

Engineering Contradiction:

Improveclient accessibilityVSAvoidattack vulnerability

Core Design Contradiction:

Ease of operationVSObject-affected harmful factors

Solution Approach 1:

A hidden server is introduced as an intermediary between clients and the visible server. The hidden server monitors communication, selectively responds to requests, and fulfills requests in place of the visible server, thereby protecting the visible server from direct attacks while maintaining service availability

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The system is segmented into two distinct servers: a visible server that maintains client accessibility and a hidden server that handles security monitoring and request fulfillment. This segmentation allows the visible server to remain accessible while the hidden server protects against attacks

Inventive Principle:

Principle #1Segmentation

2Reliability

If a hidden server is implemented to monitor and respond to requests, then security is improved, but system complexity increases

Engineering Contradiction:

Improvenetwork securityVSAvoidserver architecture

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The hidden server creates a functional copy of the visible server's interface and response capabilities. By copying the visible server's communication protocols and response formats, the hidden server can fulfill requests transparently without requiring complex translation or adaptation layers

Inventive Principle:

Principle #26Copying

Solution Approach 2:

The hidden server acts as an intermediary that simplifies the security architecture by centralizing monitoring and request fulfillment functions in a single component, rather than requiring distributed security checks across multiple servers

Inventive Principle:

Principle #24Intermediary (Mediator)

3Reliability

If the hidden server responds transparently to requests, then client awareness is reduced and security is enhanced, but the attack surface may expand

Engineering Contradiction:

Improvesecurity protectionVSAvoidattack surface

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The hidden server implements different functional qualities in different parts of its operation: it provides transparent response fulfillment for legitimate requests while maintaining selective monitoring capabilities for suspicious activity. This local differentiation allows security enhancement without uniformly expanding the attack surface

Inventive Principle:

Principle #3Local quality

Data Source

PatentUS8931089B2System and method for implementing a hidden server

Publication Date: 2015.01.06 GEORGE MASON INTPROP INC

AI summary

A technology for preventing network attacks. A service request is intercepted at an unaddressed port of a hidden device from a second device. The service request intended for a visible device is processed by the hidden device. A response may be provided based on the processing and sent to the second device.