System for providing end-to-end protection against network-based attacks

Abstract

A plurality of system nodes coupled via a dedicated private network is described herein. The nodes offer an end-to-end solution for protecting against network-based attacks. For example, a single node can receive and store user data via a data flow that passes through various components of the node. The node can be designed such that communications internal to the node, such as the transmission of encryption keys, are partitioned or walled off from the components of the node that handle the publicly accessible data flow. The node also includes a key management subsystem to facilitate the use of encryption keys to encrypt user data.

1 .- 20 . (canceled) 
     
     
         21 . A system for securely and remotely monitoring an electronic device comprising:
 a router configured to transmit messages to and receive messages from a first user device; and   a processing server configured to generate user interface data for rendering an interactive user interface on a computing device, the interactive user interface including a field for providing a value for a first parameter of the first user device, the processing server further configured to:
 receive a selection of a first value for the first parameter; 
 generate a request to provide a current value of the first parameter, wherein the router is further configured to transmit the request to the first user device; 
 receive the current value of the first parameter from the first user device via the router; 
 compare the current value with the selected first value; and 
 one of generate an alert or generate an instruction to change the current value of the first parameter to the selected first value in response to a determination that the comparison of the current value with the selected first value does not yield a match, wherein the router is configured to transmit the instruction to the first user device. 
   
     
     
         22 . The system of  claim 21 , wherein the processing server is further configured to:
 generate a second request to provide a current value of the first parameter for transmission to the first user device; and   determine that a response to the second request has not been received within a threshold period of time.   
     
     
         23 . The system of  claim 22 , wherein the processing server is further configured to generate a second alert to change a value of the first parameter to the selected first value in response to the determination that a response to the second request has not been received within the threshold period of time. 
     
     
         24 . The system of  claim 22 , wherein the processing server is further configured to generate a second instruction to change a value of the first parameter to the selected first value in response to the determination that a response to the second request has not been received within the threshold period of time. 
     
     
         25 . The system of  claim 21 , wherein the processing server is further configured to periodically generate requests to the first user device for current values of the first parameter. 
     
     
         26 . The system of  claim 25 , wherein the processing server is further configured to generate the requests to the first user device for the current values of the first parameter periodically based on at least one of a type of the first user device or a sensitivity of the first user device to a change in value. 
     
     
         27 . The system of  claim 21 , wherein the processing server is further configured to generate the user interface data in response to a request to configure the first user device, wherein the interactive user interface comprises an interactive element that, when selected, causes the user interface to display the field that allows a user to select the first value for the first parameter. 
     
     
         28 . The system of  claim 21 , wherein the first user device is associated with a parent device world, and wherein a second user device is associated with a child device world. 
     
     
         29 . The system of  claim 28 , wherein the processing server is further configured to generate the user interface data in response to a request to configure the first user device, wherein the interactive user interface comprises an interactive element that, when selected, causes the user interface to display the field that allows a user to enter the selected first value for the first parameter for association with the parent device world. 
     
     
         30 . The system of  claim 29 , wherein the interactive user interface further comprises a second interactive element that, when selected, causes the child device world to be associated with the parent device world such that the selected first value defines an operation of the second user device. 
     
     
         31 . A computer-implemented method for securely and remotely monitoring an electronic device comprising:
 receiving, via a user interface, a selection of a first value for a first parameter that defines an operation of a first user device;   generating a request to provide a current value of the first parameter;   transmitting the request to the first user device;   receiving the current value of the first parameter from the first user device;   comparing the current value with the selected first value; and   one of transmitting an alert or transmitting an instruction to the first user device to change the current value of the first parameter to the selected first value in response to a determination that the comparison of the current value with the selected first value does not yield a match.   
     
     
         32 . The computer-implemented method of  claim 31 , further comprising:
 Transmitting, to the first user device, a second request to provide a current value of the first parameter; and   determining that a response to the second request has not been received within a threshold period of time.   
     
     
         33 . The computer-implemented method of  claim 32 , further comprising transmitting a second alert to change a value of the first parameter to the selected first value in response to the determination that a response to the second request has not been received within the threshold period of time. 
     
     
         34 . The computer-implemented method of  claim 32 , further comprising transmitting, to the first user device, a second instruction to change a value of the first parameter to the selected first value in response to the determination that a response to the second request has not been received within the threshold period of time. 
     
     
         35 . The computer-implemented method of  claim 31 , further comprising transmitting, to the first user device, requests for the current values of the first parameter periodically based on at least one of a type of the first user device or a sensitivity of the first user device to a change in value. 
     
     
         36 . The computer-implemented method of  claim 31 , wherein the user interface comprises an interactive element that, when selected, causes the user interface to display a field that allows a user to select the first value for the first parameter. 
     
     
         37 . The computer-implemented method of  claim 31 , wherein the first user device is associated with a parent device world, and wherein a second user device is associated with a child device world. 
     
     
         38 . The computer-implemented method of  claim 37 , wherein the user interface comprises an interactive element that, when selected, causes the user interface to display a field that allows a user to enter the selected first value for the first parameter for association with the parent device world. 
     
     
         39 . The computer-implemented method of  claim 38 , wherein the user interface further comprises a second interactive element that, when selected, causes the child device world to be associated with the parent device world such that the selected first value defines an operation of the second user device. 
     
     
         40 . Non-transitory, computer-readable storage media comprising computer-executable instructions that, when executed, cause a computing system to:
 process a selection of a first value for a first parameter that defines an operation of a first user device received via a user interface;   generate a request to provide a current value of the first parameter;   transmit the request to the first user device;   compare the current value of the first parameter received from the first user device with the selected first value; and   transmit an instruction to the first user device to change the current value of the first parameter to the selected first value in response to a determination that the comparison of the current value with the selected first value does not yield a match.