Identity-Based Overlay Network for Secure Decentralized Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The public Internet was not designed for modern enterprise requirements, leading to cybersecurity and networking tools addressing symptoms rather than core design flaws, and the disappearance of the network perimeter necessitates a new paradigm for connecting and protecting disparate users and services.
Innovation Solution
A secure overlay network is established on top of the public Internet, using identity-based networking, fully encrypted private segments, and decentralized topology to enable secure communication among computing devices, with improved protocols and routing, and implementing a controller to manage network components, brokers, and policy enforcement.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional cybersecurity and networking tools are deployed on the public Internet, then security measures can be implemented, but they only address symptoms rather than core design flaws and require numerous separate solutions
Solution Approach 1:
The system segments the network into authenticated virtual networks (VNets) where each network is isolated and governed by specific access policies. This segmentation allows security to be implemented at the network layer rather than requiring multiple application-layer security tools, directly reducing the number of separate security solutions needed while maintaining strong security boundaries between different user groups
Solution Approach 2:
The patent introduces an intermediary authentication system that verifies user identities and establishes secure tunnel connections before allowing network access. This intermediary layer enforces access policies and creates encrypted communication channels, providing comprehensive security through a single centralized mechanism rather than multiple distributed security tools
2Adaptability or versatility
If the network perimeter is removed to enable decentralized enterprise connectivity, then user access flexibility is improved, but security and performance control become more difficult
Solution Approach 1:
The system dynamically adjusts network access based on user authentication status and policy requirements. Authenticated users are dynamically assigned to appropriate virtual networks with specific access rights, while unauthenticated users are blocked. This dynamic control mechanism maintains security and performance standards even as user access patterns change, eliminating the need for a static network perimeter
Solution Approach 2:
The authentication system serves multiple functions simultaneously: it verifies user identities, establishes secure encrypted tunnels, enforces access policies, and routes traffic to appropriate virtual networks. This multi-functional intermediary system provides comprehensive security control without requiring separate mechanisms for each function, making security management easier despite decentralized access
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A system and method for creating a secure overlay network on top of the public Internet, optionally by creating an identity-based network in which user identities are the identifiers rather than IP addresses, and whereas only authenticated and authorized users whose identity has been established have visibility and access to the network; establishing fully encrypted and private network segments; providing superior performance through improved protocols and routing; and implementing a decentralized topology that allows any two nodes on it to communicate regardless of each node's location or network settings - as if the two nodes are on the same local area network.