Isolation Structure Data Variation for Malware Protection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Computer networks are vulnerable to malware and unauthorized data transmission, which can lead to data theft and spying on internal information.

Innovation Solution

A system that includes a data variation unit generating random deviation values, which are added to data streams to prevent malware transmission and unauthorized data leakage, while processing data on an isolation structure before it reaches the protected computer structure.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If data is transmitted directly between computer structure and external sources, then data transmission efficiency is improved, but security against malware and unauthorized data leakage deteriorates

Engineering Contradiction:
Improvedata transmission efficiencyVSAvoidsecurity against malware and unauthorized data leakage
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The patent introduces an isolation structure as an intermediary component between the computer structure and external data sources. This isolation structure processes and filters data before it reaches the computer structure, thereby maintaining security while enabling data transmission. The intermediary prevents direct contact between potentially infected external sources and the protected computer system.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system divides the computer system into segmented parts: a protected computer structure and a separate isolation structure. This segmentation allows different security levels to be applied to different parts of the system, with the isolation structure handling risky external communications while the computer structure remains protected.

Inventive Principle:
Principle #1Segmentation

2Reliability

If isolation structure is introduced to protect computer structure, then security against malware is improved, but system complexity deteriorates

Engineering Contradiction:
Improvesecurity against malwareVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The isolation structure serves as a specialized intermediary component that handles security functions. By concentrating security-related operations in this single intermediary component, the patent avoids distributing complex security logic throughout the entire system, thereby managing complexity more effectively.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Reliability

If data stream is distorted by adding deviation values, then prevention of malware transmission is improved, but data transmission accuracy deteriorates

Engineering Contradiction:
Improveprevention of malware transmissionVSAvoiddata transmission accuracy
Core Design Contradiction:
ReliabilityVSManufacturing precision

Solution Approach 1:

The patent changes the parameters of the data stream by adding random deviation values to pixel data. This parameter transformation disrupts the structure of potential malware hidden in the data stream while maintaining the visual integrity of the actual image content, as small pixel variations are imperceptible to humans.

Inventive Principle:
Principle #35Parameter changes

Solution Approach 2:

The patent converts the potential harm of data distortion into a benefit for security. By deliberately distorting the data stream with random deviations, the system actually improves security by preventing malware transmission, while the visual quality remains acceptable to human observers.

Inventive Principle:
Principle #22Blessing in disguise (Convert harm into benefit)

Data Source

PatentUS20250117487A1Protecting a computer structure
Publication Date: 2025.04.10 WIDDERSHINS LTD
  • US20250117487A1 patent drawing

AI summary

The invention relates to a method for protecting a computer structure (1), comprising at least one computer unit (5, 6, 7), against malware or inadmissible data transmission, wherein the computer structure (1) is connected to an isolation structure (11) by way of a data connection (18), said isolation structure having at least one processor (12) and a main memory (13) and transmitting at least one data stream containing a sequence of data values to the computer structure (1) or receiving at least one data stream containing a sequence of data values from the computer structure (1). The object of the invention is to propose a method for interchanging data with an isolation structure (11), which method prevents or at least hampers the transmission of malware to the computer unit or the reading of data stored on the computer unit. This object is achieved by virtue of at least one data variation unit (19) using a random number generator (17) to generate variance values that are added to the data values of the data stream.