Intermediary Data Conversion for Secure Cross-Group Communication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data communication protocols are not adaptable to filter out risk data, leading to potential malfunctions and undesired activities in destination computers, especially as network complexity increases, making it challenging to prevent risk data propagation across different computer groups within communication networks.
Innovation Solution
Implementing data processing definitions that differentiate between risk and no-risk data, applying data conversion techniques such as encryption, pseudonymization, or tokenization at the source or destination computers, and using existing type-agnostic protocols to ensure only no-risk data is processed and transmitted between computer groups.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data conversion techniques are applied at source or destination computers to filter risk data, then data security and reliability are improved, but device complexity increases
Solution Approach 1:
The patent introduces an intermediary data conversion layer between source and destination computers. This intermediary component handles the data conversion and risk filtering, allowing the main computer systems to remain simple while achieving secure data transmission through the specialized conversion layer.
Solution Approach 2:
The patent segments the data processing function by separating risk data filtering from the main data transmission process. The data conversion techniques are applied as distinct processing steps at source or destination computers, allowing security functions to be isolated from core computational tasks.
2Reliability
If protocol modifications are made to filter risk data, then data security is improved, but protocol stability and compatibility deteriorate
Solution Approach 1:
The patent uses an intermediary data conversion layer that operates independently of the communication protocol. This intermediary handles security filtering while allowing the original protocol to remain unchanged and stable, thus maintaining compatibility without compromising security.
Solution Approach 2:
The patent extracts the security filtering function from the protocol itself and places it in a separate data conversion layer. This separation allows the protocol to maintain its stability and compatibility while security measures are implemented through independent data processing techniques.
3Reliability
If access restrictions and firewalls are implemented to block risk data, then data security is improved, but ease of operation and system simplicity deteriorate
Solution Approach 1:
The patent introduces an intermediary data conversion component that automatically handles security filtering. This intermediary acts as a mediator that translates and converts data before it reaches the destination, eliminating the need for complex access restriction rules and firewalls while maintaining security.
Solution Approach 2:
The patent implements self-service security where the data conversion techniques automatically identify and filter risk data without requiring manual configuration of access restrictions. The system performs security functions autonomously, simplifying operation while maintaining protection.
Data Source
Figure 1A
Figure 1B
Figure 1C
AI summary
A computer-implemented method (200) is used to transmit data from a first computer to a second computer using a first protocol (175). The computers belong to first and second computer groups. Inter-group communication is restricted to data packets with first type data. A client module of the first computer provides (210) data packets with first and second type data. An intermediate module receives (220) data packets from the client module and forwards (230) data packets to a modifier module of an auxiliary computer, using a second protocol. The auxiliary computer belongs to the first computer group. The intermediate module receives (250) modified data packets from the modifier module using the second protocol. The packets contain first type data. The intermediate module forwards (260) the modified data packets to a protocol module on the first computer that encodes (270) the modified data packets. The protocol module transmits (280) encoded modified data packets to the second computer, using the first protocol.