Secure Conferencing Device Firewall USB Control Filtering

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conferencing devices connected to interactive digital signage (IDS) face security risks due to potential malicious software on laptops and IDS devices, which can infect each other, and existing solutions fail to effectively prevent the transmission of malicious code via USB connections.

Innovation Solution

A secure conferencing device with a firewall component that transmits host or guest mode signals to IDS devices via a single cable, enabling secure communication while preventing malicious code transmission by filtering control signals and using cable retainers to secure connections, ensuring that only video streams are shared.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If USB connections are used to transmit control signals and video streams between devices, then communication functionality is improved, but security risk increases due to potential malicious code transmission

Engineering Contradiction:
Improvecommunication functionalityVSAvoidsecurity risk
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The patent introduces a USB data transfer controller as an intermediary device between the video controller and the host computer. This controller acts as a mediator that selectively permits or blocks data transmission based on predefined security rules, allowing legitimate video streams to pass through while preventing malicious code from reaching the host computer through the USB connection.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent segments the USB data transmission into different channels or types, distinguishing between video stream data and control signals. By separating these data types and applying different security policies to each, the system enables video communication functionality while blocking potentially harmful control signals that could carry malicious code.

Inventive Principle:
Principle #1Segmentation

2Reliability

If firewall component filters control signals to prevent malicious code, then security is improved, but communication functionality may be restricted

Engineering Contradiction:
ImprovesecurityVSAvoidcommunication functionality
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent changes the parameters of the firewall component by configuring it with specific rules that distinguish between legitimate and malicious control signals. Rather than blocking all control signals universally, the firewall is tuned to permit signals that meet certain criteria (such as those from authorized conferencing software) while blocking others, thus maintaining security without unnecessarily restricting communication functionality.

Inventive Principle:
Principle #35Parameter changes

3Device complexity

If single cable transmits video, audio, control, and power signals, then device complexity is reduced, but signal interference risk increases

Engineering Contradiction:
Improvecable configurationVSAvoidsignal interference
Core Design Contradiction:
Device complexityVSObject-affected harmful factors

Solution Approach 1:

The USB data transfer controller serves as an intermediary that receives all signals through the single cable, separates them into different data types (video, audio, control), and routes them appropriately. This mediation process prevents signal interference by keeping different signal types in separate processing channels while still using a single physical cable connection.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS11245949B2Secure conferencing device
Publication Date: 2022.02.08 ELO TOUCH SOLUTIONS INC(US)
  • US11245949B2 patent drawing
  • US11245949B2 patent drawing
  • US11245949B2 patent drawing

AI summary

A secure conferencing device operating in a host or a guest mode. In host mode, the secure conferencing device coupled to an interactive digital signage (IDS) device, grants conference control to a host computer of the IDS device. The secure conferencing device receives a guest control signal and a guest video stream from a guest device, where the secure conferencing device prevents the guest control signal from being communicated to the host computer, yet transmits the guest video stream to the host computer for display on the IDS device. In the guest mode, the secure conferencing device grants conference control to a guest device, enables the guest device to affect a component of the IDS device, but does not enable the guest device to communicate guest control signals to the host computer of the IDS device.