USB Access Control Device for Data Leakage Prevention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current security measures for computer networks and industrial devices lack effective protection, particularly for systems that cannot install or update security software, leading to frequent cybersecurity incidents and data integrity issues.
Innovation Solution
A USB access control device that monitors and controls communication between USB devices and protected devices by authenticating USB devices, determining communication protocol types, and disconnecting unauthorized data transfers, thereby preventing data leakage without requiring security software on the protected device.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If security software is installed on protected devices, then data security protection capability is improved, but device compatibility and system performance are worsened
Solution Approach 1:
The patent introduces a USB access control device as an intermediary between USB devices and protected devices. This external control device monitors and manages USB communication protocols without requiring any software installation on the protected device, thereby maintaining system compatibility while providing security protection through protocol analysis and abnormal behavior blocking
Solution Approach 2:
The patent replaces the traditional software-based security protection mechanism with a hardware-based USB access control device. By using a physical control device that operates at the USB communication layer rather than the application software layer, the system achieves security protection without the compatibility issues and performance overhead associated with installing security software on protected devices
2Reliability
If security software is updated timely, then security protection effectiveness is improved, but system stability and operational continuity are worsened
Solution Approach 1:
The USB access control device performs preliminary security control by authenticating USB devices before they can access the protected device and by continuously monitoring communication protocols in real-time. This proactive approach prevents security incidents before they occur, eliminating the need for reactive software updates while maintaining continuous system stability
Solution Approach 2:
The USB access control device operates autonomously without requiring updates to malicious code bases or virus definitions. It independently analyzes USB communication protocols and blocks abnormal behaviors based on predefined security rules, providing self-sustaining security protection that does not disrupt system stability through update operations
3Adaptability or versatility
If USB device communication is unrestricted, then device versatility and operational flexibility are improved, but data security and integrity are worsened
Solution Approach 1:
The patent applies different security control levels to different USB communication protocols and data transmission directions. It specifically targets and blocks batch transmission protocols that are prone to data leakage while allowing other protocols to operate normally, and selectively blocks data flow from protected device to USB device while permitting other communication patterns, thereby providing granular security control that maintains operational flexibility
Data Source
AI summary
The disclosure relates to a method for controlling the communication between USB device and protected device, which is applied to USB access control device, and the USB access control device is connected with the protected device through an interface or interfaces. In this way, the data of the protected device can be protected through the USB access control device externally connected to the protected device, so that the data leakage in the protected device can be effectively prevented, and the data of the protected device can be ensured without installing security protection software on the protected device.