Network Coping System for Unauthorized Communication Detection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing communication monitoring systems in industrial IoT settings struggle to maintain business continuity and safety when unauthorized communication occurs, as they often require stopping device operations, which disrupts task continuation.

Innovation Solution

A communication monitoring and coping system that detects unauthorized communication, identifies affected devices, and generates coping information to switch tasks to alternative or proxy devices, ensuring continued operation and safety by transmitting control commands to execute substitute processes.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a device is isolated from the network when unauthorized communication is detected, then security is improved, but device operation stops and business continuity is hindered

Engineering Contradiction:
ImprovesecurityVSAvoidbusiness continuity
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent introduces a communication monitoring and coping apparatus as an intermediary between the detected unauthorized communication and the device operations. This mediator detects unauthorized communication, identifies affected devices, determines appropriate coping processes, and transmits control commands to execute substitute processes, thereby maintaining business continuity while responding to security threats without complete isolation

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system performs preliminary actions by preparing coping processes and substitute device assignments in advance. When unauthorized communication is detected, the system can immediately execute pre-determined substitute processes on other devices, avoiding operational stoppage. The coping process determination unit searches for and prepares alternative devices before isolation is necessary

Inventive Principle:
Principle #10Preliminary action

2Reliability

If device operations are stopped to respond to unauthorized communication, then safety is improved, but task continuation is disrupted

Engineering Contradiction:
ImprovesafetyVSAvoidtask continuation
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent implements continuity of useful action by enabling substitute processes to execute on alternative devices when unauthorized communication is detected. The coping information transmission unit transmits control commands to ensure that critical tasks continue uninterrupted on substitute devices, maintaining continuous useful action rather than stopping operations for safety responses

Inventive Principle:
Principle #20Continuity of useful action

Solution Approach 2:

The system creates copies of critical processes on substitute devices. When a device is affected by unauthorized communication, the coping process determination unit identifies another device to copy and execute the necessary processes, ensuring task continuation without interruption. This copying mechanism allows safety responses without losing task continuity

Inventive Principle:
Principle #26Copying

Data Source

PatentUS11997072B2Apparatus for detecting unauthorized communication in a network and searching for a substitute device
Publication Date: 2024.05.28 HITACHI LTD
  • US11997072B2 patent drawing
  • US11997072B2 patent drawing
  • US11997072B2 patent drawing

AI summary

A communication monitoring and coping apparatus includes: a processor; a memory; an unauthorized communication detection unit that detects unauthorized communication in a network in which a plurality of devices are connected to communicate with each other and identifies a device involved in the detected unauthorized communication; a coping process determination unit that searches for another device that substitutes for the identified device and generates coping information, which is information of a process performed in place of the identified device, based on information on the network and information on each of processes performed by the plurality of devices; and a coping information transmission unit that transmits the generated coping information to an information processing apparatus that causes the other device to execute the process indicated by the coping information.