Transient Transaction Server Isolation for Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Computer systems performing transactions over the Internet are vulnerable to attacks, lacking effective security measures to protect transactions and associated data.
Innovation Solution
A networked computer system employs a control server to create or select a transaction server on demand, which executes transactions independently and self-terminates, enhancing security, privacy, and anonymity by isolating each transaction from others and the control server.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a single server handles multiple transactions continuously, then device complexity is reduced, but security is compromised because attacks on one transaction can compromise other transactions and data
Solution Approach 1:
The system segments the server functionality by creating multiple isolated transaction servers (TS1, TS2, TS3, etc.) that each handle a single transaction independently. Each transaction server is isolated from others, so that if one is compromised by an attack, other transactions remain secure. The control server manages this segmented architecture without being part of the transaction processing path.
Solution Approach 2:
The invention extracts the transaction processing function from the control server, creating separate transient transaction servers that are independent of the control server. This extraction ensures that even if the control server is compromised, the actual transaction data and processing remain protected in isolated transaction servers that terminate after each transaction.
2Reliability
If transaction servers are created on-demand for each transaction, then security is improved through isolation, but provisioning time increases causing delays
Solution Approach 1:
The system performs preliminary action by pre-provisioning multiple transaction servers (TS1, TS2, TS3, etc.) in advance and maintaining them in a ready state. When a transaction request arrives, the control server can immediately assign an available pre-provisioned transaction server without delay. After each transaction completes, the transaction server terminates, and a new one is provisioned in its place, maintaining a continuous pool of ready servers.
3Productivity
If servers are reused across multiple transactions, then productivity is improved, but security is reduced because a compromised server can affect multiple transactions
Solution Approach 1:
The invention applies the disposable principle by creating transient transaction servers that are provisioned for a single transaction and then terminated. Each transaction server is inexpensive and short-lived, existing only for the duration of one transaction. This eliminates the security risk of reused servers being compromised, as each server is fresh and isolated, while maintaining productivity through automated provisioning and termination cycles.
Data Source
AI summary
A networked computer system enables one or more transactions to be executed securely. An initiator sends a service request to a control server. The control server creates or selects an existing transaction server for the sole purpose of executing the transaction requested by the service request. If the transaction server is pre-existing, it may be in an inaccessible state and then be made accessible in response to receiving the service request. The control server informs the initiator of the created transaction server. The initiator (and possibly one or more other authorized participants) engages in the transaction with the transaction server, independently of the control server. The transaction server terminates, such as upon completion of the transaction, the expiration of a timeout period, or satisfaction of another server termination criterion. The use of such a one-time transaction server increases security, privacy, and anonymity.