NJE Gateway Node Security Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing Network Job Entry (NJE) systems face challenges in securing data communication between nodes, especially when dealing with semi-trusted or untrusted nodes from outside the corporate network, requiring extensive security administration across thousands of nodes.
Innovation Solution
Implementing a gateway node that conducts security checks on NJE packets by verifying user IDs, data types, and security levels, allowing only authorized data to pass through, and limiting packet size, thereby acting as a proxy for security protocols across the network.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If security checks are implemented at every node in the NJE network, then security reliability is improved, but device complexity and administrative burden increase significantly
Solution Approach 1:
The patent introduces a gateway node as an intermediary between trusted and untrusted NJE nodes. This gateway node集中 performs security checks on packets passing through it, verifying user IDs, data types, and security levels. By placing security functionality at the gateway rather than distributing it to every node, the system achieves high security reliability while keeping individual node complexity low and administrative burden manageable.
2Reliability
If security protocols are implemented across all nodes, then security coverage is improved, but ease of operation deteriorates due to extensive administration requirements
Solution Approach 1:
The patent extracts security check functionality from individual nodes and concentrates it at the gateway node. This allows security coverage to be maintained across the entire network while simplifying operation, as administrators only need to manage security policies at the gateway rather than configuring and maintaining security settings at thousands of individual nodes.
3Productivity
If data packets from untrusted nodes are allowed to pass through, then network connectivity and productivity are improved, but harmful factors increase due to potential security threats
Solution Approach 1:
The gateway node performs preliminary security checks on packets from untrusted nodes before allowing them to pass through to trusted nodes. It verifies user IDs, data types, and security levels in advance, blocking potentially harmful packets before they can reach internal systems. This approach maintains network connectivity for authorized traffic while preventing security threats from propagating through the network.
Data Source
AI summary
A method and system for providing security to a Network Job Entry (NJE) network. A first NJE node and a third NJE node are connected by a second NJE node. The second NJE node conducts a security check of NJE packets traveling between the first and third NJE nodes. The security check performed by the second NJE node includes checking the userid of the person or job that sent the NJE packet, as well as the NJE data type. The NJE data type may be classified by the type of operation being performed, such as a batch job, sysout, command, message, as well as what application is being used. In one preferred embodiment, the security check includes checking the security level of the source of the data being transferred, such as a sensitive application. The security check can be based on the size of the data packet, such that excessively large data packets from a particular user are not permitted to be transmitted outside a secure NJE network.