Proxy System for Automated Read-Only Networked Application Conversion

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current security solutions for preventing sensitive corporate data transfer outside corporate infrastructures are inadequate, as they require manual configuration and cannot dynamically adapt to new applications or changes, failing to effectively block user data uploads to external servers.

Innovation Solution

A proxy system is introduced between client devices and application servers, which automatically analyzes and blocks user-generated content uploads by distinguishing between control and user data inputs, using file signatures and natural language processing to classify requests and modify or block them accordingly, ensuring data remains within the corporate-controlled infrastructure.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If manual configuration of proxy blocking methods is used, then security control is established, but the system cannot dynamically adapt to new applications or changes

Engineering Contradiction:
Improvesecurity controlVSAvoiddynamic adaptation
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The system performs self-service by automatically analyzing application behavior, identifying upload methods, and configuring blocking rules without manual intervention. The proxy dynamically adapts to new applications by autonomously monitoring traffic patterns and learning user interaction methods, eliminating the need for manual reconfiguration when applications change or new ones are deployed.

Inventive Principle:
Principle #25Self-service

2Reliability

If all data uploads are blocked to prevent data loss, then data security is improved, but legitimate application functionality is disrupted

Engineering Contradiction:
Improvedata securityVSAvoidapplication functionality
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The system applies local quality by differentiating between control data and user-generated content at the granular level of individual data elements. Instead of blanket blocking all uploads, the proxy analyzes each upload request's content type, origin, and purpose, selectively blocking only user-generated content while permitting control data necessary for application functionality to pass through unchanged.

Inventive Principle:
Principle #3Local quality

3Reliability

If manual specification of URLs is used for blocking, then specific threats are addressed, but the approach is time-consuming and cannot keep pace with new threats

Engineering Contradiction:
Improvethreat blockingVSAvoidconfiguration time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system performs preliminary action by proactively monitoring and analyzing application behavior before threats materialize. The proxy continuously learns normal user interaction patterns, identifies potential upload methods, and pre-configures blocking rules in advance, enabling the system to respond instantly to new threats without manual URL specification or configuration delays.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS10389735B1Automated conversion of networked applications to read-only networked applications
Publication Date: 2019.08.20 BITGLASS LLC
  • US10389735B1 patent drawing
  • US10389735B1 patent drawing
  • US10389735B1 patent drawing

AI summary

A proxy server converts web or networked applications that communicate with remotely located servers or other data providers, into read-only applications. The proxy server dynamically analyzes web client application requests sent by client devices and determines whether each request is human-generated or machine-generated. One or more actions are performed when a request is determined to be human-generated.