Network Transaction Authentication Using Random Data Portion Verification

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional network security solutions for gateway devices in computing environments compromise performance and efficiency due to extensive data validation or digital signature verification, leading to delayed communication and increased computing resource strain.

Innovation Solution

Predict subsequent network transactions, determine attributes of data to be exchanged, discretize into portions, randomly select these portions for digital credential association, and verify authenticity of selected portions using public key cryptography.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If extensive data validation or digital signature verification is performed, then security is improved, but performance and efficiency deteriorate

Engineering Contradiction:
ImprovesecurityVSAvoidperformance
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent segments the data transmission process into multiple transactions, where only certain transactions require digital signature verification. By dividing the verification requirement across selective transactions rather than applying it to all data, the system maintains security while reducing overall processing overhead and improving performance.

Inventive Principle:
Principle #1Segmentation

2Reliability

If extensive data validation or digital signature verification is performed, then security is improved, but communication speed deteriorates

Engineering Contradiction:
ImprovesecurityVSAvoidcommunication speed
Core Design Contradiction:
ReliabilityVSSpeed

Solution Approach 1:

The patent segments verification requirements across different transactions, applying digital signature verification only to selected transactions rather than all communications. This selective approach maintains security for critical data while allowing faster communication for other transactions, thereby improving overall communication speed.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent applies verification partially rather than universally - digital signature verification is performed on selected transactions based on specific criteria rather than on every piece of data. This partial action approach ensures security where needed while avoiding unnecessary verification overhead that would slow down communication.

Inventive Principle:
Principle #16Partial or excessive action

3Reliability

If extensive data validation or digital signature verification is performed, then security is improved, but computing resource consumption increases

Engineering Contradiction:
ImprovesecurityVSAvoidcomputing resource strain
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The patent segments the application of digital signature verification to only certain transactions rather than all data transmissions. This segmentation reduces the total number of verification operations required, thereby decreasing computing resource strain and energy consumption while maintaining adequate security levels.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent implements partial verification by applying digital signature verification only to selected transactions based on specific criteria. This partial action approach avoids the excessive computing resource consumption that would result from verifying every transaction, thereby reducing overall computing resource strain.

Inventive Principle:
Principle #16Partial or excessive action

Data Source

PatentUS20250365316A1Network transaction management
Publication Date: 2025.11.27 HONEYWELL INTERNATIONAL INC
  • US20250365316A1 patent drawing
  • US20250365316A1 patent drawing
  • US20250365316A1 patent drawing

AI summary

Techniques for managing network transactions are disclosed. An attribute associated with data to be communicated to one of the first and the second set of nodes in a subsequent transaction is determined. The attribute is then translated into a divisible form made of discretized elements. One or more discretized elements are then determined from amongst the discretized elements, where each determined discretized element identifies a portion of the data. A portion identification signal is then generated based on the determined discretized elements to identify portions of the data. Further, the portion identification signal triggers association of a digital credential with each of the identified portions. An authentication status is then determined for each of the identified portions based on the digital credential associated therewith. Based on the authentication status, occurrence of the transaction may be permitted between the first set of nodes and the second set of nodes.