Network Node Inbound Connection via Linear Orbit

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Network administrators face challenges in establishing trusted connections between remote servers and network nodes for forensic investigations due to firewall restrictions, making it difficult for remote servers to communicate directly with nodes within the network.

Innovation Solution

A method is introduced to create a linear communication orbit within a network, allowing nodes to self-organize into a linear structure where instruction packets can propagate and initiate a direct duplex connection between a node and a remote server, enabling secure data upload and analysis without requiring the node to open its firewall.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If remote servers are isolated from network nodes by firewall restrictions, then network security is improved, but direct communication between remote servers and nodes deteriorates

Engineering Contradiction:

Improvenetwork securityVSAvoiddirect communication capability

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The patent introduces a trusted node within the network as an intermediary that relays communication between remote servers and network nodes. The trusted node receives instructions from remote servers, forwards them to target nodes, and relays responses back, thereby enabling communication while maintaining firewall restrictions and network security.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

Instead of allowing remote servers to initiate direct connections to network nodes (which would require firewall openings), the patent inverts the approach by having trusted nodes within the network initiate outbound connections to remote servers. This reversal enables communication while maintaining the security posture of not opening inbound ports.

Inventive Principle:

Principle #13The other way round (Inversion)

2Productivity

If direct connections are opened from remote servers to network nodes, then communication efficiency is improved, but network security deteriorates

Engineering Contradiction:

Improvecommunication efficiencyVSAvoidnetwork security

Core Design Contradiction:

ProductivityVSReliability

Solution Approach 1:

The trusted node acts as a mediator that establishes the direct connection to the remote server on behalf of the network node. This allows the network node to benefit from direct communication efficiency while the trusted node maintains security control by being the one initiating and managing the connection.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The network node receives instructions through the linear communication orbit and autonomously establishes the outbound connection to the remote server without requiring the remote server to penetrate the firewall. The node itself performs the connection establishment, data upload, and communication management, maintaining security while achieving efficiency.

Inventive Principle:

Principle #25Self-service

3Reliability

If firewall restrictions are maintained to protect network security, then security is improved, but the ability to perform forensic investigations deteriorates

Engineering Contradiction:

Improvenetwork securityVSAvoidforensic investigation capability

Core Design Contradiction:

ReliabilityVSDifficulty of detecting and measuring

Solution Approach 1:

The trusted node serves as an intermediary that enables forensic investigations by relaying investigation requests from remote servers to network nodes and transmitting forensic data back. This intermediary approach maintains firewall restrictions while providing full forensic investigation capability through the trusted node's cooperation.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent inverts the traditional forensic investigation model where remote servers actively query nodes. Instead, trusted nodes within the network initiate outbound connections to remote servers and can upload forensic data autonomously or in response to instructions received through the linear communication orbit, enabling investigations without inbound firewall openings.

Inventive Principle:

Principle #13The other way round (Inversion)

Data Source

PatentUS10482242B2System and method for performing event inquiries in a network

Publication Date: 2019.11.19 TANIUM

AI summary

A respective node in a linear communication orbit receives an instruction packet through the linear communication orbit, where the instruction packet has been propagated from a starting node to the respective node through one or more upstream nodes along the linear communication orbit, and the instruction packet includes an instruction for establishing a direct duplex connection between the respective node and a respective server. In response to receiving the instruction packet, the respective node sends an outbound connection request to the respective server to establish the direct duplex connection. The respective node then uploads local data to the respective server through the direct duplex connection (e.g., in response to one or more queries, instructions, and requests received from the respective server through the direct duplex connection), where the respective server performs analysis on the local data received from the respective node through the direct duplex connection.