Smart Device Workflow Bypass for Security Vulnerabilities

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In multi-device workflows, security vulnerabilities and anomalies in smart devices can compromise user data and disrupt system functionality, as hackers can exploit vulnerabilities and anomalies lead to operating errors and additional security risks.

Innovation Solution

A method and system that monitor smart devices for security vulnerabilities and anomalies, disconnect affected devices from the network, and re-establish workflows by replacing them with alternative devices, ensuring user consent and data protection through informed processing options.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If smart devices are connected to perform multi-device workflows, then system functionality and user convenience are improved, but security vulnerabilities and anomalies in devices can compromise user data and disrupt system functionality

Engineering Contradiction:
Improvemulti-device workflow functionalityVSAvoidsecurity vulnerabilities and anomalies
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The system performs preliminary monitoring and identification of security vulnerabilities and anomalies in smart devices before they can compromise the workflow. By continuously monitoring device behavior and network traffic, the system detects issues early and takes preventive actions to isolate affected devices, ensuring workflow continuity without requiring manual intervention.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system introduces an intermediary monitoring and management layer between the smart devices and the workflow execution. This intermediary component tracks device behavior, identifies vulnerabilities, and mediates the isolation process by automatically determining which devices can be disconnected and which workflows need to be re-routed, thus protecting the overall system while maintaining functionality.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If compromised devices are disconnected from the network to prevent data breaches, then security is improved, but workflow continuity and system functionality are disrupted

Engineering Contradiction:
Improvedata securityVSAvoidworkflow continuity
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The system extracts the compromised device from the network while preserving the rest of the workflow functionality. By isolating only the affected device and re-routing its tasks to alternative devices, the system maintains workflow continuity. The extraction process is selective, removing only the harmful element while preserving the overall system operation.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The system dynamically changes the network connectivity parameter of compromised devices from connected to disconnected, while simultaneously adjusting workflow parameters to re-route tasks. This parameter change approach allows the system to transition from a state with a compromised device to a state with enhanced security, maintaining productivity through automated workflow adaptation.

Inventive Principle:
Principle #35Parameter changes

3Reliability

If manual monitoring and isolation of compromised devices is performed, then security response is controlled, but system complexity and operational burden increase

Engineering Contradiction:
Improvesecurity response controlVSAvoidsystem management complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system implements self-service by automatically monitoring its own devices, identifying vulnerabilities, and executing isolation procedures without requiring manual intervention. The system monitors network traffic and device behavior, self-diagnoses security issues, and autonomously determines which devices to isolate and which workflows to re-route, thereby reducing operational burden while maintaining security response control.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The system continuously monitors device behavior and network traffic, creating a feedback loop that automatically triggers isolation actions when anomalies are detected. This feedback mechanism provides real-time security response control while simplifying operations, as the system adjusts to changing conditions dynamically without requiring manual reconfiguration or complex management procedures.

Inventive Principle:
Principle #23Feedback

Data Source

PatentUS11683348B2Bypassing security vulnerable and anomalous devices in multi-device workflow
Publication Date: 2023.06.20 INTERNATIONAL BUSINESS MACHINE CORPORATION
  • US11683348B2 patent drawing
  • US11683348B2 patent drawing
  • US11683348B2 patent drawing

AI summary

In an approach for bypassing security vulnerable and anomalous devices in a multi-device workflow, a processor monitors behavior and network traffic of a plurality of smart devices within a multi-smart device system. A processor identifies a first smart device of the plurality of smart devices with at least one of a security vulnerability and an anomaly. A processor identifies a multi-smart device workflow that includes the first smart device. A processor identifies a function of the first smart device within the multi-smart device workflow. A processor determines whether an alternative smart device can replace the first smart device within the multi-smart device workflow. Responsive to resolution of the at least one of the security vulnerability and the anomaly, a processor re-establishes the workflow with the first smart device.