Core Network Access Provider Identity Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The increasing number of networked devices poses challenges in establishing and maintaining user identity confidence across multiple networks with varying protocols and authentication requirements, and existing blockchain-based solutions consume significant processing power and lack flexibility.
Innovation Solution
A network architecture that integrates a distributed ledger with address protocols and identity attributes, managed by core network access providers (CNAPs) to control access and verify integrity across all layers of the communication network, using unique identifiers and digital signatures to ensure secure and scalable authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If blockchain-based technologies are used for identity verification, then security and trust are improved, but processing power consumption increases and flexibility decreases
Solution Approach 1:
The system segments the distributed ledger functionality into hierarchical layers: core network access providers maintain primary ledgers while subordinate networks maintain local ledgers. This segmentation reduces the processing burden on individual nodes while maintaining overall system security and trust through distributed verification across multiple levels.
Solution Approach 2:
The system implements dynamic adaptability by allowing different networks to join or leave the federated ledger system without requiring complete re-verification of all identities. The ledger structure dynamically adjusts to accommodate varying authentication requirements and capacities of different networks, providing flexibility while maintaining security.
2Reliability
If traditional session-specific authentication is used, then network anonymity and resilience are maintained, but user identity confidence and accountability decrease
Solution Approach 1:
The distributed ledger acts as an intermediary between anonymous network communication and identity verification. It provides a trusted record of user identities and authentication credentials without requiring direct trust between communicating parties, thereby maintaining network anonymity while establishing identity confidence through the intermediary ledger system.
Solution Approach 2:
The federated distributed ledger system serves multiple functions simultaneously: it provides identity verification, maintains authentication credentials, enables cross-network trust, and supports both anonymous and identified communication modes. This multi-functionality reduces overall system complexity by consolidating multiple authentication mechanisms into a single universal framework.
3Reliability
If centralized authentication systems are implemented, then user accountability is improved, but network scalability and decentralization benefits are reduced
Solution Approach 1:
The system segments authentication authority across multiple core network access providers rather than concentrating it in a single central authority. Each provider maintains and verifies identities within its jurisdiction, enabling user accountability to be enforced locally while the federated structure allows the network to scale by adding new providers without requiring changes to the central authentication mechanism.
Data Source
AI summary
A computer-implemented method of providing nodes, such as data structures and devices, with access to a network is disclosed, and a corresponding network architecture. At least one core network access provider controls real time access to the network across the layers of a protocol stack for the network, and sequentially assigns a network communication address to the or each access-requesting node. The assigned network address is encoded with a unique parameter of the node and a unique parameter of the node user, in a sequential identifier ledger which is distributed in real time to all of the network-connected nodes. Each node processes the ledger to verify its sequential integrity and, upon determining a sequential integrity loss, the ledger record causing the loss is identified and an alert comprising the identified record is broadcast to the nodes across the network. The core network access provider cancels network access for the node to which the network communication address corresponding to the identified ledger record was assigned, upon either identifying the ledger record at the verifying step or receiving an alert.