Inspection Computer Secure Data Transmission Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current data communication systems lack robust mechanisms for ensuring the security and integrity of data transmission between source and destination computers, despite advancements in data security, as information security violations and data breaches continue to rise.
Innovation Solution
A computerized method involving an inspection computer that receives data from a source computer, applies filtering mechanisms, signs inspection results, and determines based on an inspection management policy whether to perform manual inspection and additional verification before sending data to a destination computer, utilizing cryptographic signing in secure enclaves to ensure data integrity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional data transmission methods are used, then communication speed and simplicity are maintained, but data security and integrity are compromised due to rising security violations and data breaches
Solution Approach 1:
An inspection computer is introduced as an intermediary component between the source computer and destination computer. This inspection computer applies filtering mechanisms to inspect data in transit, separately signs inspection results, and performs additional verification based on inspection management policies. The intermediary handles the security inspection tasks without requiring complex changes to the source or destination systems themselves, thus improving data security while limiting the complexity increase to a dedicated inspection component rather than the entire communication system.
2Productivity
If automated filtering mechanisms are applied to all data, then inspection efficiency is improved, but security coverage is reduced because automated systems cannot handle all security scenarios
Solution Approach 1:
The inspection system dynamically adjusts its operation mode based on data characteristics and risk levels. The inspection computer determines based on inspection management policies whether to apply automated filtering mechanisms or to send data for manual inspection. This dynamic approach allows the system to efficiently process low-risk data through automated filtering while escalating high-risk or ambiguous cases to manual inspection, thereby maintaining both high inspection efficiency and comprehensive security coverage.
3Reliability
If manual inspection is performed on all data, then security coverage is maximized, but inspection time and operational overhead increase significantly
Solution Approach 1:
Instead of applying manual inspection to all data, the system applies partial manual inspection only when necessary. The inspection computer uses automated filtering mechanisms to handle routine inspection tasks and only escalates specific cases requiring human judgment based on inspection management policies. This partial application of manual inspection maintains comprehensive security coverage for critical cases while avoiding the excessive time consumption and operational overhead that would result from universal manual inspection.
4Reliability
If multiple verification layers are implemented, then data integrity is enhanced, but system complexity and processing overhead increase
Solution Approach 1:
The verification process is segmented into distinct functional components: automated filtering mechanisms for initial inspection, signing mechanisms for result validation, inspection management policies for decision-making, and manual inspection capabilities for exceptional cases. Each component performs a specific verification function and can operate independently. This segmentation allows multiple verification layers to be implemented with manageable complexity, as each segment handles a specific aspect of verification rather than requiring a monolithic complex system.
Data Source
AI summary
There is provided a computerized method of secure communication between a source computer and a destination computer, the method performed by an inspection computer and comprising: receiving data sent by the source computer to the destination computer; inspecting the received data using one or more filtering mechanisms, giving rise to one or more inspection results; separately signing each of the one or more inspection results; determining, based on an inspection management policy, whether to send at least some of the inspection results and/or derivatives thereof for manual inspection; upon a positive determination, providing manual inspection of the at least some inspection results and/or derivatives thereof, and providing signing of the at least one manual inspection result; and analyzing signed inspection results and performing additional verification of the signed inspection results when a result of the analyzing meets a predefined criterion specified by the inspection management policy.