Self-Clustering Edge Computing for Distributed Network Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current network security systems rely on centralized scanning tools that are inefficient in identifying and addressing potential security issues across multiple nodes, lacking the ability to dynamically adapt security measures based on real-time traffic patterns and node similarities.

Innovation Solution

A self-clustering system that utilizes edge computing to analyze traffic patterns, apply device-specific security measures, and broadcast changes to adjacent nodes, employing machine learning to classify security protocol changes and implement tailored security adjustments across the network, thereby enhancing overall security awareness and response.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If centralized scanning tools are used to identify security issues, then security coverage can be achieved across the network, but the system lacks real-time responsiveness and cannot dynamically adapt to traffic patterns

Engineering Contradiction:
Improvesecurity coverageVSAvoidresponse time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent divides the centralized security scanning function into distributed edge-based security agents deployed at multiple network nodes. Each agent independently monitors local traffic patterns and implements security measures, eliminating the single-point control bottleneck and enabling parallel processing across the network, thus reducing response time while maintaining comprehensive coverage

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system dynamically adapts security measures based on real-time traffic analysis. Edge security agents continuously monitor network traffic patterns and automatically adjust security protocols according to detected anomalies and learned behaviors, transforming static centralized scanning into a dynamic, responsive distributed system

Inventive Principle:
Principle #15Dynamics

2Adaptability or versatility

If individual node security measures are applied separately, then device-specific security can be implemented, but the system lacks collective security awareness and cannot leverage node similarities

Engineering Contradiction:
Improvedevice-specific securityVSAvoidnetwork-wide security patterns
Core Design Contradiction:
Adaptability or versatilityVSLoss of information

Solution Approach 1:

The patent implements feedback loops where edge security agents share security observations, threat intelligence, and traffic pattern data with neighboring nodes and a centralized coordinator. This feedback mechanism enables nodes to learn from each other's experiences, propagate security awareness across the network, and collectively adapt to emerging threats while maintaining device-specific security policies

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

The system merges individual node security data with network-wide context by clustering similar nodes based on traffic patterns and device characteristics. Nodes within clusters coordinate their security responses, combining local device-specific measures with collective network intelligence to achieve both adaptability and comprehensive security awareness

Inventive Principle:
Principle #5Merging (Combining)

3Measurement precision

If comprehensive traffic analysis is performed at the centralized system, then complete network visibility is achieved, but the system complexity and processing burden increase significantly

Engineering Contradiction:
Improvenetwork traffic analysis accuracyVSAvoidcentralized system complexity
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The patent segments the complex task of comprehensive traffic analysis into smaller, manageable units performed by distributed edge security agents at network nodes. Each agent analyzes local traffic patterns independently, reducing the data volume and computational complexity that would otherwise need to be processed centrally, while maintaining high measurement precision through localized context awareness

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces edge security agents as intermediary components between individual network nodes and the centralized system. These agents perform preliminary traffic analysis and filtering locally, extracting relevant security insights before transmitting summarized data to the centralized coordinator, thereby reducing the processing burden on the central system while preserving analysis accuracy

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS20240406219A1System and method for self-clustering edge computing protection
Publication Date: 2024.12.05 BANK OF AMERICA CORP
  • US20240406219A1 patent drawing
  • US20240406219A1 patent drawing
  • US20240406219A1 patent drawing

AI summary

Systems, computer program products, and methods are described herein for self-clustering computing protocols. The present invention is configured to detect, using a node analysis engine, a change in a network security protocol associated with a first node or device within a distributed network, and transmit instructions for the first node or device to broadcast the change to nearby nodes or devices such that they can act in concert to protect against identifies security issues.