Token-Based Firewall Configuration for Decentralized Networks

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing firewall configurations in decentralized networks require manual setup and approval by network managers, leading to prolonged vulnerabilities and inefficiencies in securing user devices.

Innovation Solution

A system and method that automates the generation and update of firewall security configurations using tokens, allowing decentralized networks to dynamically adjust firewall policies based on user entitlements, reducing the need for manual intervention and enhancing security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If manual setup and approval by network managers is used for firewall configurations, then security control and management oversight are improved, but implementation time and system vulnerabilities increase

Engineering Contradiction:

Improvesecurity controlVSAvoidimplementation time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The system performs preliminary actions by pre-configuring firewall rules and policies before they are needed. The automated system prepares security configurations in advance based on monitored system interactions and entitlements, so that when deployment is required, the firewall is already configured and ready for immediate implementation, eliminating the manual setup time while maintaining security standards

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The firewall configuration system performs self-service by automatically monitoring system interactions, determining appropriate security policies, and deploying firewall rules without requiring manual intervention from network managers. The system serves itself by generating and implementing security configurations autonomously based on predefined criteria and real-time data, thus eliminating the time loss associated with manual approval processes while maintaining reliable security control

Inventive Principle:

Principle #25Self-service

2Reliability

If individual firewall configuration for each user device is prepared manually, then security policy compliance is improved, but productivity and response time deteriorate

Engineering Contradiction:

Improvesecurity policy complianceVSAvoidconfiguration speed

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The system applies universality by creating a single automated configuration process that serves multiple user devices simultaneously. The automated firewall configuration system can generate and deploy security policies across numerous devices through a unified process, maintaining security policy compliance for each device while dramatically improving overall productivity compared to individual manual configuration

Inventive Principle:

Principle #6Universality (Multi-functionality)

Solution Approach 2:

The system utilizes parameter changes by dynamically adjusting firewall configuration parameters based on monitored system interactions and user entitlements. The automated system can modify security parameters in real-time across multiple devices, ensuring policy compliance while maintaining high configuration speed, as the system adapts parameters programmatically rather than requiring manual adjustment for each device

Inventive Principle:

Principle #35Parameter changes

3Reliability

If manual firewall setup processes are used, then security review and approval quality are improved, but resource consumption and operational costs increase

Engineering Contradiction:

Improvesecurity review qualityVSAvoidoperational resources

Core Design Contradiction:

ReliabilityVSLoss of energy

Solution Approach 1:

The system replaces the mechanical manual review and approval process with an automated computational system. Instead of human network managers manually reviewing and approving each firewall configuration, the system uses automated algorithms to monitor system interactions, evaluate security requirements, and deploy appropriate firewall rules. This substitution maintains security review quality through systematic analysis while dramatically reducing operational resource consumption by eliminating manual labor

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The system implements feedback mechanisms by continuously monitoring system interactions and using this information to automatically adjust and improve firewall configurations. The feedback loop ensures that security review quality is maintained or enhanced through data-driven decisions, while reducing operational resources as the system learns and adapts automatically without requiring additional human review efforts

Inventive Principle:

Principle #23Feedback

Data Source

PatentUS12418509B2System and method for updating a firewall security configuration in a decentralized network

Publication Date: 2025.09.16 BANK OF AMERICA CORP

AI summary

An apparatus may comprise a memory communicatively coupled to a processor. The memory may be configured to store user profiles and security information. The processor may be configured to receive a device profile from a user device. Further, the processor may be configured to validate the device profile against a user profile; determine an entitlement associated with the user profile; generate an initial token indicating that the device profile is entitled to access the entitlement; transmit the initial token to a decentralized network; and receive an updated token from the decentralized network. The updated token may indicate a firewall configuration based at least in part upon the initial token. The firewall configuration may be configured to enable the user device to access the entitlement. The processor may be configured to transmit the firewall configuration to the user device to implement a firewall at the user device.