Temporary Communication Systems With Risk-Triggered Address Changes
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Cybersecurity events compromise communication systems, making secure internal communication challenging and complicating remediation efforts, especially when attackers control email systems and document architectural layouts.
Innovation Solution
A temporary self-provisioning communication system using cloud-based, containerized microservices with automated provisioning and removal, ensuring secure, untraceable, and auditable communication services through a separate server device hosted by a third party, with features like automatic address changes based on risk scoring.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a communication system is used during cybersecurity events, then secure internal communication is enabled, but the system itself may be compromised by attackers
Solution Approach 1:
The patent extracts the communication system from the compromised enterprise environment by deploying it on external cloud infrastructure. This separation removes the communication system from the attacked network, preventing attackers from compromising it while maintaining secure internal communication capabilities during cybersecurity events.
Solution Approach 2:
The patent introduces a temporary communication system as an intermediary between compromised internal systems and external networks. This mediator enables secure communication by routing traffic through a controlled, isolated environment that prevents direct attacks on internal systems while maintaining connectivity.
2Reliability
If attackers control the email system, then communication disruption occurs, but automated address changing can restore security
Solution Approach 1:
The patent implements dynamic address management where the communication system automatically changes its network addresses (IP addresses, domain names) in response to detected threats or time-based triggers. This dynamic behavior prevents attackers from maintaining control by repeatedly compromising static addresses, thereby restoring communication availability while blocking disruption attempts.
Solution Approach 2:
The patent changes network parameters such as IP addresses and domain names automatically through risk scoring mechanisms. When the risk score exceeds a threshold, the system modifies these parameters to new values, effectively restoring secure communication by removing attacker control over the original addresses.
3Loss of information
If documentation systems contain architectural layouts, then system information is available, but intruders can use this to prevent remediation
Solution Approach 1:
The patent performs preliminary actions by automatically detecting and isolating sensitive documentation systems before attackers can exploit their architectural layouts. The system proactively identifies systems containing sensitive information and applies security controls in advance, preventing intruders from using documentation to plan and execute remediation-blocking attacks.
4Reliability
If manual remediation processes are used, then security control is maintained, but response time increases
Solution Approach 1:
The patent implements automated feedback loops where the communication system continuously monitors risk scores based on security events and automatically triggers address changes when thresholds are exceeded. This closed-loop control maintains security reliability by responding to threats while reducing remediation time through automation, eliminating the delay associated with manual processes.
Solution Approach 2:
The patent enables the communication system to perform self-service remediation by automatically detecting compromised addresses, calculating risk scores, and changing addresses without human intervention. This self-service capability maintains security control through automated decision-making while dramatically reducing remediation time compared to manual processes.
Data Source
AI summary
An example computer system for providing a communication system can include: one or more processors; and non-transitory computer-readable storage media encoding instructions which, when executed by the one or more processors, causes the computer system to: monitor criteria associated with the communication system; assign a weight to the criteria to determine a risk score associated with the communication system; and automatically change an address of the communication system when the risk score exceeds a threshold.


