Network Device Trust Score Management for Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional network devices are vulnerable to malicious activities due to weak security links, which can lead to large-scale disruptions and losses, especially as the number of connected devices increases, with the potential for malicious entities to exploit networks and issue certificates that can affect billions of devices.

Innovation Solution

A method and system for determining trust scores among network devices, where devices request and receive trust score data from a trust score management server, generate and transmit trust scores, and configure operational parameters based on these scores to restrict interactions and ensure secure data sharing, using a combination of certificate-based and peer-to-peer trust score calculations.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If conventional network devices exchange information and collaborate at large scale, then network functionality and connectivity are improved, but security vulnerabilities and susceptibility to malicious activities increase

Engineering Contradiction:
Improvenetwork connectivityVSAvoidsecurity
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The system performs preliminary trust score verification before allowing network devices to exchange information or collaborate. When a device joins the network or requests data access, the system proactively calculates and verifies trust scores based on device behavior, certificate validation, and interaction history, preventing malicious activities before they can compromise network security

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent introduces an intermediary trust score verification mechanism between network devices. Instead of direct peer-to-peer trust assumptions, devices must obtain and verify trust scores from the system, which acts as a mediator assessing device reliability based on multiple factors including certificate validation, behavior analysis, and interaction patterns

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If trust score verification and control parameter configuration are implemented, then security against malicious activities is improved, but device complexity and operational overhead increase

Engineering Contradiction:
ImprovesecurityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system implements trust score verification selectively rather than universally. Full verification with multiple factors (certificate validation, behavior analysis, interaction history) is applied only when risk indicators are present or when accessing sensitive resources. For routine low-risk operations, simplified verification is used, reducing overhead while maintaining security

Inventive Principle:
Principle #16Partial or excessive action

Solution Approach 2:

The system dynamically adjusts control parameters based on trust score thresholds. When trust scores exceed certain thresholds, devices gain expanded permissions with minimal verification. When scores drop below thresholds or anomalies are detected, the system automatically tightens control parameters, adjusting security measures to match the actual risk level rather than applying uniform complexity

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentUS11425133B2System and method for network device security and trust score determinations
Publication Date: 2022.08.23 HARMAN INT IND INC
  • US11425133B2 patent drawing
  • US11425133B2 patent drawing
  • US11425133B2 patent drawing

AI summary

The present disclosure relates to systems, devices and methods for device security and trust score determinations. In one embodiment, a method includes requesting, by a first device, trust score data for a second device, wherein the first device requests trust score data from a trust score management server, and receiving, by the first device, trust score data from the trust score management server. The method also includes generating a first trust score for the second device and transmitting the first trust score for the second device with a trust score management server. The method also includes configuring, by the first device, at least one control parameter for operation of the first device with the second device based on the first trust score, wherein configuring adjusts a previous control parameter to restrict operation of the first device relative to the second device. Device and systems are provided to enhance network security.