Security Information Sharing System for Countermeasure Effect Assessment

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing security information sharing technologies do not effectively improve the speed and ease of adjusting the range of security information disclosure.

Innovation Solution

A sharing system that includes countermeasure reception, notification, effect reception, and effect information provision mechanisms to quickly notify and assess the effectiveness of countermeasures against abnormal states in target devices, with features like concealing periods and identifiers for countermeasure and log information.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Speed

If security information is shared rapidly and broadly, then the speed of disclosure is improved, but the risk of information leakage to unauthorized parties increases

Engineering Contradiction:
Improvespeed of disclosureVSAvoidinformation leakage risk
Core Design Contradiction:
SpeedVSObject-affected harmful factors

Solution Approach 1:

The patent applies preliminary action by pre-defining disclosure range settings and authorization levels before information sharing occurs. The system establishes predetermined disclosure ranges and authorization rules in advance, allowing rapid information sharing within safe boundaries without requiring real-time authorization decisions, thus achieving both speed and security.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent implements local quality by allowing different disclosure ranges and authorization levels for different pieces of security information. Each information item can have its own tailored disclosure settings, enabling selective sharing where sensitive information receives stricter control while less sensitive information can be shared more broadly and quickly.

Inventive Principle:
Principle #3Local quality

2Ease of operation

If the range of security information disclosure is made flexible and adjustable, then the ease of adjustment is improved, but the system complexity increases

Engineering Contradiction:
Improveease of adjustmentVSAvoidsystem complexity
Core Design Contradiction:
Ease of operationVSDevice complexity

Solution Approach 1:

The patent applies dynamics by making the disclosure range adjustable and flexible rather than fixed. The system allows dynamic modification of disclosure ranges and authorization settings, enabling users to adapt information sharing parameters to changing security requirements while maintaining manageable complexity through structured adjustment mechanisms.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The patent implements segmentation by dividing the security information into different categories and disclosure ranges. This segmentation allows independent adjustment of disclosure settings for different information types, making the system easier to manage despite the overall flexibility, as each segment can be configured and adjusted separately.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS20240411885A1Sharing system, sharing method, countermeasure device, and storage medium
Publication Date: 2024.12.12 NEC CORP
  • US20240411885A1 patent drawing
  • US20240411885A1 patent drawing
  • US20240411885A1 patent drawing

AI summary

A sharing system according to an aspect of the present disclosure includes: at least one memory storing a set of instructions; and at least one processor configured to execute the set of instructions to: receive countermeasure information from a countermeasure device configured to generate the countermeasure information representing a countermeasure against an abnormal state in a case where log information representing a security state of a target device indicates the abnormal state; notify the target device of the received countermeasure information; receive an effect of the countermeasure against the abnormal state from the countermeasure device that determines the effect of the countermeasure from the log information after notification of the countermeasure information; and provide effect information representing the effect to a predetermined effect information provision target.