Multi-tiered Protection Platform for Network Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional approaches to securing computer networks, such as implementing a demilitarized zone (DMZ), often expose networks to security vulnerabilities due to redirects between service providers and lack effective control over data presentation, leading to compliance failures and potential security breaches.
Innovation Solution
A multi-tier platform with an intermediate layer that interacts with the web layer to control data presentation, removing sensitive data portions and storing static data locally, thereby reducing the need for redirects and enhancing security by buffering the application and database layers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a traditional DMZ is implemented to secure the network perimeter, then network security is improved, but the system exposes security vulnerabilities due to redirects between service providers and lacks effective control over data presentation
Solution Approach 1:
The patent introduces an intermediate layer positioned between the web layer and application layer that acts as a mediator. This layer controls data presentation by removing sensitive data portions before data flows between layers, and manages redirects through controlled interaction with external service providers. The intermediate layer thus secures the network perimeter while eliminating the security vulnerabilities associated with traditional DMZ approaches by providing granular control over data flow and presentation.
2Adaptability or versatility
If redirects are implemented between service providers to access dynamic data, then data accessibility is improved, but the system exposes the network to possible security vulnerabilities
Solution Approach 1:
The intermediate layer serves as a controlled intermediary that manages all redirects between the web layer and external service providers. When dynamic data is required, the intermediate layer handles the redirect process securely, accessing external service providers only when necessary and controlling what data is returned to the web layer. This maintains data accessibility while eliminating uncontrolled redirects that create security vulnerabilities.
Solution Approach 2:
The system applies different data handling strategies locally: static data is removed and stored at the intermediate layer for efficient local access, while dynamic data triggers controlled redirects to external service providers. This localized approach optimizes data accessibility for each type while maintaining security through controlled interaction with external providers only when dynamically accessed data is required.
3Speed
If static data is stored at the intermediate layer instead of querying the registered source, then data access speed is improved, but the system requires additional storage capacity
Solution Approach 1:
The intermediate layer implements a selective storage strategy where only static data portions are removed from source data and stored locally, while dynamic data portions are not stored and instead trigger queries to the registered source when needed. This approach improves access speed for static data while minimizing storage requirements by not storing dynamic data that changes frequently.
Solution Approach 2:
The system applies partial action by removing and storing only the static data portion from source data, rather than storing entire data sets. This selective approach optimizes the balance between access speed and storage capacity by storing only the portion of data that benefits from local caching (static data) while avoiding the storage overhead of dynamic data.
Data Source
AI summary
A multi-tier platform provides additional security at a perimeter of a computer system, where an intermediate layer interacts with a web layer and controls data presentation to the web layer. When the intermediate layer receives a data request for dynamic data from the web layer, the intermediate layer obtains source data from the registered source and may remove a specified portion from the source data to obtain the dynamic data before returning it to the web layer. When requested data comprises static data, the intermediate layer accesses the static data from storage maintained at the intermediate layer. The intermediate layer obtains the static data by the registered source previously publishing source data and the intermediate layer removing a specified portion from it. Source data may assume different forms including a webpage of an external service provider with embedded third-party information being removed by the intermediate layer before presenting it.