Local Security Scoring for Compliant Data Communication Routing

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current cellular networks lack flexibility in handling data based on sensitivity, leading to inefficient security protocols and prolonged authentication times, which compromises network bandwidth and security.

Innovation Solution

Implementing a local configuration table on individual devices to determine security scores and route transactions through compliant communication channels, eliminating the need for redundant communications with a central server and enabling efficient, secure data transfer.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a central server is used to determine security protocols and route information, then security regulation is centralized and controlled, but additional communications are required between computing devices and the central server, increasing network bandwidth usage and authentication time

Engineering Contradiction:
Improvesecurity regulationVSAvoidauthentication time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent segments the security regulation function from the central server to individual computing devices. Each device is equipped with a local configuration table containing security rules, enabling it to autonomously evaluate security scores and determine authentication requirements without continuously communicating with the central server for security decisions.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent implements preliminary action by pre-populating configuration tables in each computing device with security rules and parameters before security evaluation is needed. This allows devices to immediately assess security scores and perform authentication without delay, as the necessary security criteria are already available locally.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If multifactor authentication is implemented to enhance security, then security of data transmission is improved, but sequential verification of authentication factors prolongs authentication time and requires additional round-trip communications

Engineering Contradiction:
Improvedata transmission securityVSAvoiddata transmission efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent applies dynamics by making the authentication process adaptive rather than fixed. The system dynamically determines the number and type of authentication factors required based on the calculated security score. When security score meets requirements, authentication is simplified or waived; when it falls short, only the necessary additional factors are requested, avoiding unnecessary authentication steps.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The patent changes parameters by using security score as a variable parameter that directly influences authentication requirements. The security score, calculated from multiple factors including device state, user behavior, and environmental context, dynamically adjusts the authentication threshold, allowing the system to flexibly balance security and efficiency based on real-time conditions.

Inventive Principle:
Principle #35Parameter changes

3Ease of operation

If a single set of protocols is used for all data transfers, then implementation is simple and consistent, but the system lacks flexibility to differentiate handling of information based on sensitivity

Engineering Contradiction:
Improveprotocol implementationVSAvoidsecurity differentiation
Core Design Contradiction:
Ease of operationVSAdaptability or versatility

Solution Approach 1:

The patent implements local quality by applying different security protocols and authentication requirements to different data transfers based on their sensitivity. The configuration tables contain differentiated security rules that are locally applied to each computing device and data type, allowing high-sensitivity data to receive enhanced protection while low-sensitivity data uses standard protocols.

Inventive Principle:
Principle #3Local quality

Solution Approach 2:

The patent achieves universality through the configuration table framework, which provides a unified structure for storing diverse security rules applicable to multiple scenarios. The same configuration table mechanism handles different data types, devices, and security levels, making the system both versatile in its differentiation capability and consistent in its implementation approach.

Inventive Principle:
Principle #6Universality (Multi-functionality)

4Reliability

If enhanced authentication procedures are sequentially verified, then security is enhanced, but network bandwidth is reduced due to multiple round-trip exchanges of authentication information

Engineering Contradiction:
Improveauthentication securityVSAvoidnetwork bandwidth
Core Design Contradiction:
ReliabilityVSLoss of energy

Solution Approach 1:

The patent segments authentication evaluation from centralized server processing to distributed device-level processing. Each computing device independently calculates security scores and determines authentication requirements using local configuration tables, eliminating the need for multiple round-trip communications with the central server for security evaluation.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent implements self-service by enabling computing devices to autonomously perform security score evaluation and authentication factor verification without requiring continuous server intervention. The device uses its own resources and local configuration to self-determine authentication requirements, reducing network bandwidth consumption.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS12470587B2Systems and methods for regulating data communication
Publication Date: 2025.11.11 WELLS FARGO BANK NA
  • US12470587B2 patent drawing
  • US12470587B2 patent drawing
  • US12470587B2 patent drawing

AI summary

Systems, apparatuses, methods, and computer program products are disclosed for regulating data communication. An example method includes receiving, by transaction circuitry, a communication request and identifying, by data collection engine and based on the communication request, a set of security parameters. The example method further includes determining, by security analysis engine and based on the set of security parameters, a security score associated with the communication request and in an instance in which the security sore fails to satisfy a security requirement, determining, by the security analysis engine, one or more security actions based on the security score and performing, by the transaction circuitry, the one or more security actions. The example method further includes routing, by data regulation engine and based on a configuration table, a transaction associated with the communication request to a compliant communication channel.