Network Device Content Classification via Hash Lookup
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Network devices face increased latency and resource consumption when processing large amounts of content to determine whether it is harmful, leading to inefficiencies in providing content to destinations and consuming significant network resources.
Innovation Solution
A network device determines a classification of content by computing values using a hash function and performing lookups in a data store, selectively providing values or portions of content to a security analysis device when classifications cannot be determined, optimizing processing and network resources.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If network devices process large amounts of content to determine whether it is harmful, then security analysis accuracy is improved, but latency increases and network resources are consumed
Solution Approach 1:
The patent segments content into multiple portions and computes hash values for each portion. Instead of analyzing the entire content, the system divides it into smaller segments, computes hashes, and performs lookups on these segmented portions. This segmentation approach maintains security analysis accuracy while reducing the time and resources required for processing large amounts of content.
Solution Approach 2:
The patent extracts only the essential identifying feature of content (hash value) rather than processing the entire content. By computing a hash value from the content and using this extracted feature for lookup and classification, the system achieves accurate security analysis without the latency and resource consumption of processing the full content.
2Reliability
If network devices process large amounts of content to determine whether it is harmful, then security analysis accuracy is improved, but network resource consumption increases
Solution Approach 1:
The patent extracts only the essential identifying feature of content (hash value) rather than processing the entire content. By computing a hash value from the content and using this extracted feature for lookup and classification, the system achieves accurate security analysis without the resource consumption of processing full content through the network.
Solution Approach 2:
The patent uses hash values as compact representations (copies) of the original content. Instead of transmitting and processing the actual content, the system works with these compact hash copies, which consume minimal network resources while maintaining the ability to accurately identify and classify content for security purposes.
3Measurement precision
If network devices send all content to security analysis devices for processing, then classification accuracy is improved, but the amount of information transmitted increases
Solution Approach 1:
The patent extracts only the essential identifying feature of content (hash value) and transmits this extracted feature to security analysis devices for classification. This approach maintains classification accuracy while minimizing the quantity of information transmitted across the network.
Solution Approach 2:
The patent transforms the content from its original large-size form into a compact parameter representation (hash value). This parameter change converts the content into a condensed form that preserves the essential identifying characteristics needed for accurate classification while dramatically reducing the amount of data that needs to be transmitted.
Data Source
AI summary
A first device may receive content from a second device based on a request for the content. The first device may be located between the second device and a third device. The first device may determine a value for a portion of the content using a function, where the value is to be used to analyze the content. The value may uniquely identify the portion of the content. The first device may determine whether a classification of the content can be determined. The first device may selectively determine the classification of the content by providing the value or the portion of the content corresponding to the value, to a fourth device when the classification cannot be determined, or determine the classification of the content using a data store when the classification can be determined. The first device may perform an action with respect to the content.