Temporary Cloud Communication Networks With Automated Endpoint Changes
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Cyber security events compromise communication systems, making secure internal communication challenging and complicating remediation efforts, with existing solutions often relying on vulnerable infrastructure and being traceable to the entity.
Innovation Solution
A temporary, self-provisioning communication system using cloud-based, containerized microservices that are unattributable to the entity, allowing secure communication during cyber security events, with automated deployment and removal, and non-attributable billing, and featuring a risk scoring model for address changes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a communication system uses existing infrastructure during cyber security events, then communication can be maintained, but the system becomes vulnerable to attacks and traceable to the entity
Solution Approach 1:
The patent extracts the communication system from the compromised enterprise infrastructure and deploys it as a separate, temporary system in a cloud environment. This separation removes the communication functionality from the vulnerable internal network while maintaining operational capability during security events.
Solution Approach 2:
The patent introduces a cloud-based intermediary platform that hosts the temporary communication system. This intermediary acts as a mediator between users and the compromised internal systems, enabling secure communication without direct reliance on the vulnerable infrastructure.
2Reliability
If a temporary communication system is deployed during cyber security events, then security posture is improved, but system complexity and deployment time increase
Solution Approach 1:
The patent creates a universal temporary communication system that can serve multiple purposes: providing secure communication, isolating users from compromised systems, and enabling remediation activities. This multi-functional approach consolidates what would otherwise require multiple separate systems.
Solution Approach 2:
The patent pre-configures the temporary communication system with necessary communication protocols, security measures, and infrastructure before deployment. This preliminary preparation allows the system to be rapidly instantiated when needed without requiring complex on-site configuration during security events.
3Ease of operation
If communication systems store detailed architectural documentation, then system information is available for operations, but intruders can use this information to prevent engineers from stopping attacks
Solution Approach 1:
The patent applies different information quality levels to different users and contexts. The temporary communication system provides necessary operational information to authorized users while deliberately omitting or obscuring detailed architectural documentation that could aid attackers. This localized information approach maintains operability without facilitating attacks.
Data Source
AI summary
An example computer system for providing a communication system can include: one or more processors; and non-transitory computer-readable storage media encoding instructions which, when executed by the one or more processors, causes the computer system to: monitor criteria associated with the computer system; calculate a risk score associated with the communication system; and automatically change one or more endpoints of the computer system when the risk score exceeds a threshold.