Network Protection Rule Swapping with Preloaded Rule Sets

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Network protection devices require significant time to switch between complex rule sets, leading to inefficiencies and potential exacerbation of network attacks due to continued processing with outdated rules during the switch.

Innovation Solution

Preprocess multiple rule sets before implementation, allowing for efficient switching by synchronizing multiple processors to transition between them without simultaneous processing, thereby reducing the time required for rule set changes.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Manufacturing precision

If the network protection device processes packets with complex rule sets, then the network protection granularity is improved, but the switching time between rule sets increases

Engineering Contradiction:

Improvenetwork protection granularityVSAvoidswitching time between rule sets

Core Design Contradiction:

Manufacturing precisionVSLoss of time

Solution Approach 1:

The patent preloads multiple rule sets into the network protection device before they are needed. When a rule set switch is required, the device can immediately activate the preloaded rule set without experiencing loading delays, thus reducing switching time while maintaining complex rule protection capabilities

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent creates copies of multiple rule sets and stores them in the device's memory. Instead of loading a single rule set, the device maintains multiple copies ready for immediate use, enabling fast switching between different protection scenarios without sacrificing rule complexity

Inventive Principle:

Principle #26Copying

2Adaptability or versatility

If the network protection device switches between rule sets, then the network policy adaptability is improved, but the packet processing continuity deteriorates

Engineering Contradiction:

Improvenetwork policy adaptabilityVSAvoidpacket processing continuity

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The device prepares multiple rule sets in advance and keeps them ready in memory. When switching is needed, the transition is seamless because the new rule set is already loaded and configured, preventing packet processing interruptions and maintaining continuity

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent ensures that packet processing continues without interruption during rule set switches. By having multiple rule sets preloaded and using efficient switching mechanisms, the device maintains continuous packet processing capability while adapting to different network policies

Inventive Principle:

Principle #20Continuity of useful action

Data Source

PatentUS12463942B2Rule swapping in a packet network

Publication Date: 2025.11.04 CENTRIPETAL NETWORKS INC

AI summary

In some variations, first and second rule sets may be received by a network protection device. The first and second rule sets may be preprocessed. The network protection device may be configured to process packets in accordance with the first rule set. Packets may be received by the network protection device. A first portion of the packets may be processed in accordance with the first rule set. The network protection device may be reconfigured to process packets in accordance with the second rule set. A second portion of the packets may be processed in accordance with the second rule set.