Secure Data Packet Routing via Digital Twin Simulation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Large-scale enterprise networks face inefficiencies due to unintended routing pathways, leading to data delays and congestion, particularly in complex environments with numerous software applications and servers, making it challenging to detect and correct these issues, especially when handling sensitive encrypted data.

Innovation Solution

An AI method that traces data packets within the network to identify bottlenecks and inefficiencies, using machine learning algorithms to simulate and implement changes in routing pathways, such as reconfiguring routing tables and adding hardware resources, to optimize data flow and alleviate congestion.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If data packets are routed through complex network environments with multiple servers and applications, then data transmission can reach more destinations, but unintended routing pathways cause delays and congestion

Engineering Contradiction:
Improvedata transmission reachVSAvoiddata delivery delay
Core Design Contradiction:
Adaptability or versatilityVSLoss of time

Solution Approach 1:

The system performs preliminary actions by creating a digital twin of the network topology before actual data transmission. This digital twin is used to simulate and identify optimal routing pathways in advance, preventing unintended routing delays before they occur in the actual network

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system implements feedback by continuously monitoring actual data packet routing against the digital twin model. When deviations or inefficiencies are detected, the system uses this feedback to adjust routing decisions and correct unintended pathways in real-time

Inventive Principle:
Principle #23Feedback

2Reliability

If sensitive consumer data is encrypted before being released onto the network, then data security is improved, but routing systems cannot detect whether the payload is needed by nearby or distant nodes

Engineering Contradiction:
Improvedata securityVSAvoidrouting optimization capability
Core Design Contradiction:
ReliabilityVSDifficulty of detecting and measuring

Solution Approach 1:

The system introduces an intermediary approach by using metadata and digital twin modeling to represent encrypted data flows. Instead of attempting to inspect encrypted payloads directly, the system uses the digital twin to simulate and analyze routing requirements, allowing optimization decisions to be made based on metadata rather than plaintext content

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system creates a copy of the network environment in the form of a digital twin. This virtual copy allows routing analysis and optimization to be performed on simulated data flows without compromising the security of actual encrypted data, enabling routing decisions while maintaining encryption

Inventive Principle:
Principle #26Copying

3Adaptability or versatility

If the network handles a large number of software applications and servers, then system functionality is improved, but the complexity of detecting and correcting undesirable data flows increases

Engineering Contradiction:
Improvesystem functionalityVSAvoidnetwork monitoring complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The system creates a virtual copy of the complex network environment through digital twin technology. This digital replica allows for simplified monitoring and analysis of data flows without directly interacting with the complex actual network, reducing the operational complexity of detecting and correcting undesirable flows

Inventive Principle:
Principle #26Copying

Solution Approach 2:

The system segments the complex network monitoring task by separating the digital twin simulation environment from the actual network operations. This segmentation allows routing analysis to be performed independently in the virtual model, simplifying the detection and correction processes

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS20240235982A9Secure and selective data packet routing
Publication Date: 2024.07.11 BANK OF AMERICA CORP
  • US20240235982A9 patent drawing
  • US20240235982A9 patent drawing
  • US20240235982A9 patent drawing

AI summary

A system is provided that selectively routes data packets along a secure pathway from a source node to a destination node. The system may avoid target routing devices or regions that may be associated with compromised data security or otherwise be associated with a threshold risk of a data breach. The system may configure intermediary nodes to route data packet over the alternative data routing pathway. The system may formulate a secure header for a data packet that instructs a source node to forward the data packet to a target intermediary node. The secure header may replace a default header of the data packet and direct the data packet from the source node to the target intermediary node.