Service Interaction Pattern Verification for Malicious Network Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing networks of distributed services are vulnerable to malicious services that can compromise security, integrity, safety, and availability, often going undetected and requiring high administrative effort and computational resources for authentication and authorization.
Innovation Solution
A method involving identifying and detecting non-qualified services by comparing observed interaction patterns with agreed comparative interaction patterns during communication, using a verification subsystem that includes an observer, matcher, gate, and contract repository, with cryptographic security to ensure authenticity and integrity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If access regulations such as certificates, authentications and authorizations are used to deny malicious services access to networks, then network security is improved, but administrative effort and computing time requirements increase significantly
Solution Approach 1:
The patent applies preliminary action by establishing contracts with defined interaction patterns during the build time (t_b) before services are deployed to runtime (t_r). These contracts specify expected communication behaviors in advance, allowing the system to automatically verify service legitimacy without requiring administrative intervention during operation. The contracts are created and stored beforehand, enabling automated detection of malicious services that deviate from expected patterns.
2Loss of information
If cryptographic methods and authentication mechanisms are implemented to protect network services, then information security is improved, but computing time during uptime increases
Solution Approach 1:
The patent uses copying by creating contract specifications that represent expected interaction patterns between services. Instead of performing complex cryptographic verification of every communication, the system copies the essential security requirements into contract definitions during build time. These contracts are then used for efficient pattern matching during runtime, replacing computationally intensive authentication with lighter-weight behavioral verification.
3Stability of the object's composition
If traditional authentication systems are used to prevent unauthorized access, then network integrity is improved, but the system requires high administrative effort and secret management
Solution Approach 1:
The patent implements self-service by enabling services to automatically verify each other's legitimacy through contract-based interaction pattern matching. Services independently check whether communicating partners follow expected behaviors defined in contracts, eliminating the need for centralized authentication authorities or manual secret management. The system self-regulates by detecting and excluding services that deviate from contractual agreements without human intervention.
Data Source
AI summary
Various embodiments of the teachings herein include a method for identifying/detecting non-qualified services in a network of distributed services. In some embodiments, the method includes: detecting comparative interaction patterns between at least two services in a contract; observing interaction patterns during the communication of the services; and comparing the observed interaction patterns with the comparative interaction patterns.