Network User Resolution via IP-Port Mapping
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In multi-user network environments, existing technologies fail to accurately associate network activities with specific users due to shared network connections and dynamic addressing, leading to difficulties in identifying users from network packets, especially in systems like Windows 2000 and those using NetBIOS, which are being phased out.
Innovation Solution
A database-based system that maps network transactions to specific users by storing records with username, computer name, IP address, and logon time, allowing for user identification through IP address and port number pairs, even in multi-user systems, using a centralized network server to determine user names associated with network traffic.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If a single network connection is shared by multiple users and software processes, then network resource utilization is improved, but the ability to associate network activities with specific users deteriorates
Solution Approach 1:
The patent segments the shared network connection by introducing unique identifiers (connection IDs, port numbers) for each software process and user session. This allows the single physical connection to be logically divided into multiple distinguishable streams, enabling accurate attribution of network packets to specific users while maintaining shared access to the network infrastructure.
Solution Approach 2:
The patent introduces intermediary components including a name resolution service and database that act as mediators between the shared network connection and user identification. These intermediaries maintain mapping tables that correlate connection identifiers with user information, enabling indirect but accurate user identification without requiring separate physical connections for each user.
2Ease of operation
If dynamic addressing is used to automatically assign network addresses, then ease of network configuration is improved, but the stability of the mapping between machines and network addresses deteriorates
Solution Approach 1:
The patent implements preliminary action by establishing and maintaining a name resolution database that proactively stores and updates the mapping between dynamic IP addresses and machine identities. This pre-established mapping infrastructure allows the system to adapt to address changes without disrupting user identification, as the database is continuously updated to reflect current address assignments.
Solution Approach 2:
The patent embraces dynamics by designing a flexible name resolution system that automatically adapts to changing network addresses. The mapping tables are dynamically updated to reflect current address assignments, allowing the system to maintain accurate user identification despite the fluid nature of dynamic addressing. This dynamic adaptation occurs without requiring manual reconfiguration.
3Adaptability or versatility
If NetBIOS and legacy name resolution methods are used, then compatibility with existing systems is improved, but reliability of user identification deteriorates due to systems being phased out
Solution Approach 1:
The patent implements universality by designing a name resolution service that can operate with multiple naming protocols and address resolution methods simultaneously. The system is configured to work with both legacy NetBIOS methods and modern DNS-based resolution, allowing it to maintain compatibility with existing systems while providing reliable user identification through a unified approach that doesn't depend on any single phased-out technology.
Data Source
AI summary
Systems and software that enable mapping of a particular network transaction with a specific computer and user in an organization. The network packet may be a live in-transit packet, or a packet that occurred at some time in the past. In a particular implementation, a database currently comprises a collection of records containing fields for username, computer name, IP address of the computer, and logon time. A name resolution is performed by taking an IP address and time as input, and determining from the records in the database what user's computer owned the IP address at that time.