Communication Device Whitelist Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional communication systems lack adequate security measures when remotely changing setting values of communication devices.
Innovation Solution
A communication device with a controller that receives commands through a communication interface, determines if the command includes a specific object identifier, and only processes the command if it originates from a trusted device, enhancing security by preventing unauthorized changes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If setting values are remotely changed via network commands, then ease of operation is improved, but security is worsened due to lack of authentication mechanisms
Solution Approach 1:
The system performs preliminary authentication by checking whether the transmitting device is registered in advance in a whitelist stored in the communication device's memory. This preliminary action prevents unauthorized devices from modifying settings before they can cause harm.
Solution Approach 2:
A whitelist acts as an intermediary mechanism between the command transmission and setting modification processes. The whitelist mediates by allowing only pre-registered devices to transmit commands that can modify settings, thus securing the remote operation capability.
2Reliability
If authentication mechanisms are added to remote commands, then security is improved, but device complexity is worsened
Solution Approach 1:
The system uses a simplified authentication approach by copying the whitelist storage and checking mechanism from conventional access control systems. This allows implementation of security without requiring complex cryptographic protocols or multiple authentication layers.
Solution Approach 2:
The authentication mechanism changes the parameter being checked from device identity verification to whitelist presence verification. This parameter change simplifies the authentication process by relying on a pre-established trust relationship rather than continuous verification.
3Productivity
If all commands are processed without verification, then productivity is improved, but security is worsened due to unauthorized access
Solution Approach 1:
The system applies partial verification by checking only the transmitting device's whitelist status rather than verifying every aspect of each command. This partial action maintains high processing speed while providing sufficient security for the critical authentication requirement.
Solution Approach 2:
The whitelist check is performed as a preliminary action before command processing. This preliminary verification ensures that only authorized devices can initiate command processing, preventing unauthorized access while maintaining efficient processing for authorized commands.
Data Source
AI summary
A communication device includes a communication interface, a memory configured to store a setting value, and a controller. The controller is configured to receive a command including an object identifier of a management information base to request reading of the setting value corresponding to a value of the object identifier from the memory or writing of the value of the object identifier in the memory, determine whether the object identifier is a specific identifier, determine whether the command has been transmitted from a first device or a second device, and read or write the setting value corresponding to a value of the specific identifier.