A device network access authentication method based on SDN

Abstract

The invention relates to an SDN-based device network access authentication method, and proposes a new local authentication logic design. The SDN controller can fully grasp the device information, complete the device access authentication function with a global view, and solve the problem of IoT / OT smart devices. The automatic access and authentication of the target LAN access, among which, through the configuration method, the opening of the smallest granularity network policy between smart devices can be realized, which can effectively control the destruction of the network by unauthorized devices, and through the equipment manufacturer certificate and the target LAN The dual certificates of the corresponding access certificates ensure one-time authentication and obtain the effect of permanent registration. At the same time, an internal trust system of the target LAN can be established, which can effectively improve the security of interaction between smart devices; the entire authentication process only passes once with the manufacturer. The interaction of the certification center can solve the situation that the smart device certificate is fraudulently used, and ensure the security and efficiency of smart device access.

Description

technical field [0001] The invention relates to an SDN-based device network access authentication method, belonging to the technical field of network access authentication. Background technique [0002] With the development of Internet technology, the Industrial Internet has brought not only the improvement of product quality and production efficiency, but also the reduction of costs. , and encapsulated into reusable micro-service components, third-party application developers can develop different industrial APPs for specific industrial scenarios, and then build an industrial ecology based on the industrial Internet platform. [0003] However, with the development of the Industrial Internet and the continuous popularization of smart manufacturing terminals, smart manufacturing companies have an increasing demand for IoT / OT device access and networking. Industrial IoT devices have been deployed on a large scale in industrial enterprises, but there are some problems in the c...

AI Technical Summary

Problems solved by technology

Networking is generally based on wired methods. Although the reliability of data transmission is high, due to wiring problems, it is no longer suitable for networking of large-scale IoT / OT smart devices, and there is a lack of security mechanisms in network access control. Only relying on The physical isolation method can no longer meet the current safety production requirements

[0005] In the design of networking based on the IEEE802.11 protocol family, it can meet the wireless networking requirements of IoT / OT smart devices, and can achieve access authentication requirements through simple authentication mechanisms and strong authentication mechanisms. Modifying the configuration on the corresponding network devices (routers, switches, firewalls) is a very tedious task. In the rapidly changing business environment of the Industrial Internet, the high stability and high performance of the network are not enough to meet business needs, flexibility and agility On the contrary, it is more critical

Images