SPX Network Security Score Assessment Engine

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

There is a need for a method to automatically assess and improve the real-time security of Sequenced Packet Exchange (SPX) network connections by analyzing and quantifying security levels based on various inputs from network components and providing users with clear, actionable feedback.

Innovation Solution

The method involves analyzing data transmissions through SPX network nodes, identifying security implementations, assigning coefficients to these implementations, calculating a security score, and providing users with personalized suggestions for improvement, including notifications and alternative security measures.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If manual security assessment methods are used for SPX network connections, then security analysis can be performed, but the process is time-consuming and cannot provide real-time security evaluation

Engineering Contradiction:
Improvesecurity assessment accuracyVSAvoidassessment time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system automatically collects security data from multiple SPX network nodes, calculates security scores, and generates recommendations without human intervention. The automated assessment engine continuously monitors network traffic and security implementations across ingress, in-transit, and egress nodes, providing real-time security evaluation that eliminates manual assessment delays

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The system provides continuous feedback to users through security score notifications and improvement recommendations. When security scores fall below thresholds, the system automatically sends notifications with actionable recommendations, enabling users to improve their security posture based on real-time feedback from the assessment engine

Inventive Principle:
Principle #23Feedback

2Measurement precision

If comprehensive security analysis of multiple network nodes is performed, then security score accuracy is improved, but system complexity increases

Engineering Contradiction:
Improvesecurity score precisionVSAvoidsystem complexity
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The system divides the SPX network into three distinct segments: ingress nodes, in-transit nodes, and egress nodes. Each segment is assessed independently with node-type specific security criteria, allowing comprehensive security analysis while managing complexity through structured segmentation. The assessment engine processes each node type separately and aggregates results into an overall security score

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system changes assessment parameters based on node type, applying different security criteria and weighting coefficients to ingress, in-transit, and egress nodes. This parameter adaptation allows precise security measurement for each node type while maintaining a unified assessment framework that manages overall system complexity

Inventive Principle:
Principle #35Parameter changes

3Measurement precision

If security assessment results are provided in detailed technical format, then accuracy is maintained, but user understanding becomes difficult

Engineering Contradiction:
Improvesecurity measurement accuracyVSAvoiduser comprehension
Core Design Contradiction:
Measurement precisionVSEase of operation

Solution Approach 1:

The system uses color-coded visual indicators to represent security score levels and risk categories, making technical security assessments instantly comprehensible to users. Security scores and risk levels are displayed with color coding that intuitively communicates security status without requiring users to interpret complex technical data

Inventive Principle:
Principle #32Color changes

Solution Approach 2:

The system introduces an intermediary layer that translates detailed technical security assessments into user-friendly recommendations. The assessment engine generates both detailed technical analysis and simplified actionable recommendations, serving as a mediator between accurate security measurement and user comprehension

Inventive Principle:
Principle #24Intermediary (Mediator)

4Reliability

If real-time security monitoring is implemented across all SPX nodes, then security awareness is improved, but data processing requirements increase

Engineering Contradiction:
Improvesecurity monitoring effectivenessVSAvoiddata processing load
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The system extracts only the critical security-relevant data from network traffic at each node, rather than processing all data. The assessment engine identifies and extracts key security parameters from ingress, in-transit, and egress nodes, reducing data processing requirements while maintaining effective security monitoring through focused data extraction

Inventive Principle:
Principle #2Taking out (Extraction)

Data Source

PatentUS10225278B1Method of assessing real-time security of sequenced packet exchange (SPX) network connection
Publication Date: 2019.03.05 SYNIVERSE TECHNOLOGIES LLC
  • US10225278B1 patent drawing
  • US10225278B1 patent drawing
  • US10225278B1 patent drawing

AI summary

A method of assessing the security of a user's connection to a Sequenced Packet Exchange (SPX) network and the user's consumption of services via the SPX network. The invention includes digitally accessing a plurality of network nodes and obtaining data transmissions through said plurality of network nodes. Each transmission corresponds to a security implementation of a current state of the user's connection or consumption of SPX services. A coefficient is determined for each security implementation, wherein the coefficient corresponds to a weight given to each security implementation in determining a level of security of the user's connection or consumption. A security score representative of the level of security of the user's connection is calculated as a function of the security implementation and their corresponding coefficients. The security score is output to the user.