Nested Virtual Machine Messaging Security for Crypto Brokerage

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Mobile trading apps face challenges with message security, particularly in unregulated crypto trading, due to vulnerabilities in publish and subscribe messaging protocols that expose digital wallets to malicious actors and cause performance issues like latency and packet loss.

Innovation Solution

A brokerage platform system utilizing nested virtual machines to identify and prioritize message publishers based on risk scores, manage network traffic, and implement automated algorithms to block untrustworthy information, ensuring secure and reliable transactions.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If publish and subscribe messaging protocols are used for message transmission, then communication efficiency is improved, but security vulnerability increases exposing digital wallets to malicious actors

Engineering Contradiction:
Improvecommunication efficiencyVSAvoidsecurity vulnerability
Core Design Contradiction:
ProductivityVSObject-affected harmful factors

Solution Approach 1:

The patent introduces a messaging protocol layer that acts as an intermediary between publishers and subscribers. This layer includes authentication mechanisms, encryption functions, and risk assessment modules that mediate message transmission. The protocol validates publisher identities, encrypts sensitive data, and filters malicious content before delivery, thus maintaining communication efficiency while mitigating security vulnerabilities exposed by direct publish-subscribe protocols.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system implements feedback mechanisms where subscriber risk scores and message authentication results are fed back into the messaging protocol. The protocol uses feedback from authentication failures, risk assessments, and message validation to dynamically adjust security measures and routing decisions. This feedback loop enables the system to respond to emerging threats while maintaining efficient message delivery.

Inventive Principle:
Principle #23Feedback

2Reliability

If security measures are implemented to block malicious messages, then security is improved, but network performance deteriorates due to packet filtering and validation overhead

Engineering Contradiction:
ImprovesecurityVSAvoidnetwork performance
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent applies preliminary action by performing authentication, encryption, and risk assessment of messages before they enter the network transmission layer. Publisher credentials are verified and risk scores are calculated in advance, allowing the messaging protocol to pre-filter and prioritize messages. This preliminary processing reduces the computational overhead during actual message transmission and delivery, maintaining network performance while ensuring security.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system implements local quality by applying different security measures and processing priorities to different message types and publishers based on their risk profiles. High-risk publishers or message types receive enhanced validation and encryption, while trusted publishers enjoy streamlined processing. This differentiated approach ensures comprehensive security coverage without uniformly applying all security measures to all traffic, thus preserving network performance.

Inventive Principle:
Principle #3Local quality

3Measurement precision

If multiple security validation steps are added to messages, then detection accuracy is improved, but processing time increases causing latency

Engineering Contradiction:
Improvedetection accuracyVSAvoidprocessing time
Core Design Contradiction:
Measurement precisionVSLoss of time

Solution Approach 1:

The patent segments the security validation process into distinct modular components: authentication module, encryption module, risk assessment module, and content validation module. Each component handles a specific aspect of security validation independently. This segmentation allows for parallel processing of different validation tasks and enables the system to apply only the necessary validation steps based on message type and publisher risk profiles, reducing overall processing time while maintaining comprehensive detection accuracy.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS12423131B1Message security management nested platforms
Publication Date: 2025.09.23 MORGAN STANLEY SERVICES GROUP INC
  • US12423131B1 patent drawing
  • US12423131B1 patent drawing
  • US12423131B1 patent drawing

AI summary

Embodiments of the invention are directed to a brokerage platform cloud-based system connected to the mobile apps of users for the sharing of reliable information and the trading of digital assets such as cryptocurrencies, tokens, NFTs and the like. The brokerage platform may consist of multiple nested virtual machines or clusters. These various virtual and guest machines may be referred to interchangeably herein as nodes, clusters, virtual machines, or VMs. Some of these clusters may be configured to receive messages and data packets, identifying transmitters and publishers, identifying the risk scores of these publishers, and prioritizing publishers over each other. Calculations may also be undertaken more efficiently via the use of nested virtual machines or virtual machine clusters than by conventional, non-nested, non-virtualized processing. Nested machines allow several parallel processes to occur simultaneously while maintaining co-location to minimize delays between the various VMs across the different levels of nesting.