Trusted Signature Redundant Security Scanning
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current network security systems are inefficient due to redundancy in scanning data packets at multiple layers, leading to increased costs and resource usage, as the same data may be scanned multiple times for malware, and coordinating these scans is complex.
Innovation Solution
A method where a signature of a trusted security element is added to data packets, indicating previous security actions, allowing subsequent security elements to determine if further actions are necessary, thereby reducing redundant scans by identifying and performing only necessary security actions based on the signature.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple layers of security scanning are implemented on data packets, then network security reliability is improved, but processing time and resource consumption increase due to redundant scans
Solution Approach 1:
The patent applies preliminary action by having the first security element perform the security scan and add a signature to the data packet header before it reaches subsequent security elements. This preliminary security action and documentation prevents redundant scanning at later stages, as subsequent elements can verify the signature to confirm the scan already occurred.
Solution Approach 2:
The patent implements feedback through the signature mechanism in the data packet header. The signature provides feedback information to subsequent security elements about the security status of the data packet, allowing them to adjust their actions accordingly - either performing additional scans or skipping redundant ones based on the signature verification result.
2Reliability
If multiple layers of security scanning are implemented on data packets, then network security reliability is improved, but processor resource consumption increases due to redundant scans
Solution Approach 1:
The first security element performs the security scan and documents it by adding a signature to the data packet header in advance. This preliminary action eliminates the need for subsequent security elements to repeat the same scanning process, thereby reducing processor resource consumption across the entire security system while maintaining comprehensive security coverage.
Solution Approach 2:
The signature in the data packet header provides feedback to subsequent security elements about the security processing already performed. This feedback mechanism allows subsequent elements to make informed decisions about whether to perform additional scans or to skip redundant processing, optimizing processor resource utilization.
3Reliability
If security actions are performed at every network layer, then security coverage is improved, but system complexity increases due to coordination difficulties
Solution Approach 1:
The patent introduces an intermediary mechanism - the signature in the data packet header - that facilitates coordination between multiple security elements. This intermediary carries essential information about security processing status, allowing different security elements to communicate their actions and decisions without complex inter-element coordination protocols, thereby reducing system complexity.
4Reliability
If all incoming data packets are scanned for malware, then security detection capability is improved, but processing efficiency deteriorates due to redundant scanning
Solution Approach 1:
The first security element performs the malware scan and records the result by adding a signature to the data packet header. This preliminary scanning action ensures comprehensive security detection while preventing subsequent elements from repeating the same scan, thereby maintaining high processing efficiency across the security system.
Solution Approach 2:
The signature mechanism provides feedback to subsequent security elements about the malware scanning status of each data packet. This feedback enables subsequent elements to skip redundant scanning operations while maintaining comprehensive security detection capability, thus preserving processing efficiency.
Data Source
AI summary
A computer implemented method, apparatus, and computer usable program code for screening data packets. A determination is made as to whether a signature of a trusted security element is present in a header of the data packet in response to receiving a data packet. The signature indicates that a previous security action has been performed on the data packet. A security action is performed on the data packet based on the previous security action performed on the data packet in response to the signature of the trusted security element being present.