Security Device Preemptive Policy Determination

Solution Overview

Problem

Security devices experience delays in enforcing access policies due to the need to determine policies after receiving requests from user devices, which can lead to increased latency in processing these requests.

Innovation Solution

Implementing a system where security devices preemptively determine policies based on potential requests identified in responses from server devices, allowing for immediate processing of subsequent requests without the need for additional policy determination.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Loss of time

If security devices determine policies after receiving requests, then policy enforcement accuracy is maintained, but request processing latency increases

Engineering Contradiction:

Improverequest processing latencyVSAvoidpolicy enforcement accuracy

Core Design Contradiction:

Loss of timeVSReliability

Solution Approach 1:

The security device performs preliminary policy determination by analyzing the first request and preemptively establishing a policy before the second request arrives. This preliminary action eliminates the need for real-time policy analysis when the second request is received, thereby reducing latency while maintaining enforcement accuracy through pre-validated policy application.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system dynamically adjusts its operation mode based on request patterns. When a first request is received, the system transitions to preliminary policy determination mode, analyzing the request and establishing policies in advance. When subsequent requests match the pattern, the system switches to expedited processing mode, applying pre-determined policies without full re-analysis, thus optimizing response time while maintaining security standards.

Inventive Principle:

Principle #15Dynamics

2Productivity

If security devices process each request individually with full policy determination, then policy accuracy is ensured, but processing efficiency decreases

Engineering Contradiction:

Improverequest processing efficiencyVSAvoidpolicy determination time

Core Design Contradiction:

ProductivityVSLoss of time

Solution Approach 1:

The security device performs preliminary policy determination by analyzing the first request and preemptively establishing a policy before the second request arrives. This preliminary action eliminates the need for real-time policy analysis when the second request is received, thereby reducing latency while maintaining enforcement accuracy through pre-validated policy application.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system merges the policy determination process across multiple requests by identifying patterns between the first request and subsequent requests. When requests share common characteristics or originate from the same source, the system combines their policy evaluation, determining a unified policy that applies to both requests, thereby eliminating redundant analysis and improving processing efficiency.

Inventive Principle:

Principle #5Merging (Combining)

Data Source

PatentUS9112912B1Security device for preemptively determining policies

Publication Date: 2015.08.18 JUNIPER NETWORKS INC

AI summary

A device is configured to receive a first request sent from a user device to a server. The first request may include a request to receive particular information from the server. The device receives a response to the first request sent from the server to the user device. The response includes the particular information. The device determines a potential request from the user device based on the particular information included in the response. The devices determines a policy associated with the potential request prior to a second request corresponding to the potential request being received. The device receives the second request from the user device. The device processes the second request based on the policy that was determined prior to the second request being received.