Secure Tunnel Selection for Adaptive Network Access Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network communication protocols lack dynamic determination of cryptographic techniques, leading to inefficient use of resources and increased costs in a post-quantum computing environment, as they often default to the strongest available security protocol without considering the entire network security environment.
Innovation Solution
A system and method for dynamically determining a security level for secure tunnels between network identities based on real-time assessment of security attributes, using machine learning and pre-defined policies, to establish secure connections tailored to specific access requests, employing either classic or quantum-resistant cryptography as needed.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If standard TLS protocols employ the strongest available cryptographic cipher suite, then security level is improved, but computing resources are excessively consumed and costs increase
Solution Approach 1:
The patent implements dynamic determination of cryptographic techniques based on real-time security assessments. Instead of statically using the strongest cipher suite, the system dynamically selects appropriate cryptographic methods by evaluating security attributes of network identities, environments, and data, thereby optimizing the balance between security and computing resource consumption
Solution Approach 2:
The system changes cryptographic parameters (cipher suite selection, quantum-resistant vs. traditional cryptography) based on varying security conditions. By adjusting these parameters according to the assessed security attributes, the system adapts to different network environments and optimizes resource usage while maintaining adequate security
2Reliability
If quantum-resistant cryptographic techniques are used, then security against quantum computers is improved, but computing resources and costs increase significantly
Solution Approach 1:
The patent applies quantum-resistant cryptography only when necessary, based on the assessed security attributes. Rather than universally applying the most secure quantum-resistant techniques to all connections, the system uses them selectively for high-risk scenarios, thereby reducing overall computing complexity while maintaining quantum security where needed
3Ease of manufacture
If static determination of cryptographic levels is used, then implementation is simplified, but network security is insufficient as strong cryptography is not applied where needed
Solution Approach 1:
The system incorporates feedback mechanisms where security attributes of network identities and environments are continuously assessed, and this information feeds into the cryptographic technique selection process. This feedback loop enables the system to adapt cryptographic choices to actual network conditions, improving security while maintaining manageable implementation through automated decision-making
Data Source
AI summary
Systems, methods, and apparatuses are disclosed for establishing secure access between network identities. Techniques may include receiving, from a first network identity, a request to access a second network identity and obtaining at least one security attribute. Techniques may further include determining, based on the at least one security attribute, a security level for a secure tunnel with a communication component located in a network associated with the second network identity, identifying, just-in-time and based on the security level, the secure tunnel with the communication component located in the network associated with the second network identity resource; and establishing a secure connection with the second network identity using the secure tunnel.