Attestation-Based Routing for Secure Network Path Selection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current network routing systems lack robust and reliable security verification measures, particularly as the number of nodes increases, leading to heightened security risks due to reliance on freshness-based verification methods that can be compromised by attackers and transactional challenge-response models that do not support unidirectional verification.
Innovation Solution
Implement attestation-based routing that involves obtaining attestation vectors from candidate next-hop nodes, determining confidence scores by comparing these vectors to a trusted image vector, and selecting the most secure path for data packet transmission, independent of freshness and supporting unidirectional verification communications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If the number of nodes in the network is increased to provide greater network connectivity, then network connectivity and expansion are improved, but security risks increase due to more potential compromised nodes
Solution Approach 1:
The system implements continuous feedback through attestation vectors that provide real-time security status information about next-hop nodes. The routing device receives attestation vectors from candidate nodes, compares them against trusted image vectors, and uses this feedback to dynamically select secure routes. This closed-loop feedback mechanism enables the network to maintain security despite increased node count by continuously monitoring and responding to the security state of individual nodes.
Solution Approach 2:
The patent introduces an intermediary verification layer using attestation vectors and trusted image vectors. Instead of directly trusting any node in the expanded network, the system uses these vector comparisons as intermediaries to verify node integrity. This intermediary mechanism allows the network to safely expand by providing an additional security layer that mediates between the routing device and potential compromised nodes.
2Speed
If freshness-based verification methods are used to verify node security, then verification speed is improved, but reliability deteriorates because attackers can compromise these verification methods
Solution Approach 1:
The system performs preliminary action by pre-establishing trusted image vectors that represent the known good state of nodes. Instead of relying on dynamic freshness-based verification that can be attacked, the system prepares trusted reference vectors in advance and compares current attestation vectors against these predetermined trusted states. This preliminary preparation enables both fast verification (by direct comparison) and high reliability (by using unchangeable trusted references).
Solution Approach 2:
The patent uses disposable attestation vectors that are generated for each verification instance and then discarded. Each attestation vector is a lightweight, single-use verification token that provides fresh security verification without the complexity of maintaining long-lived verification states. This approach enables rapid, reliable verification by using inexpensive, short-lived verification objects that cannot be compromised by attackers.
3Adaptability or versatility
If transactional challenge-response models are used for verification, then interaction flexibility is improved, but unidirectional verification support deteriorates
Solution Approach 1:
The system implements self-service verification where the routing device independently obtains attestation vectors from candidate next-hop nodes and performs verification autonomously without requiring challenge-response interactions. Each node provides its attestation vector unilaterally, and the routing device independently compares it against trusted image vectors to determine route security. This self-service approach eliminates the need for complex bidirectional challenge-response protocols while maintaining verification effectiveness.
Data Source
AI summary
At a networking device, a method includes obtaining, according to a predefined protocol, a first plurality of attestation vectors from a corresponding plurality of candidate next-hop nodes. Each of the plurality of candidate next-hop nodes is included within a respective route between a particular node and a destination node. The method further includes determining a plurality of confidence scores. Each of the plurality of confidence scores is based on a comparison between a corresponding one of the first plurality of attestation vectors and a trusted image vector. The method further includes selecting, from the plurality of confidence scores, a particular confidence score that satisfies one or more selection criteria. Each of the particular confidence score is associated with a particular candidate next-hop node of the plurality of candidate next-hop nodes. The method further includes directing, to the particular candidate next-hop node, a data packet destined for the destination node.