Distributed Infrastructure Controllers for Secure Device Discovery
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing distributed infrastructures lack features that enhance user experience, productivity, and reduce learning curves, particularly in test and measurement environments, by not providing efficient mechanisms for discovering, controlling, and securely communicating with multiple test devices and instruments.
Innovation Solution
A distributed infrastructure system that includes a main distributed infrastructure controller (MDIC) for sending broadcast messages, initiating authentication services, and providing authentication tokens for secure connections, along with sub-distributed infrastructure controllers (SDICs) to manage and control distributed applications and services, facilitating secure communication and management across networks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If existing Ethernet/IP infrastructure is used for connecting test devices, then basic network communication is achieved, but the infrastructure lacks features for efficient device discovery, control, and secure communication
Solution Approach 1:
The patent introduces a Distributed Infrastructure Controller (DIC) as an intermediary component that mediates between test devices and the network infrastructure. The DIC provides enhanced device discovery, control, and authentication capabilities that extend beyond standard Ethernet/IP protocols, thereby improving adaptability without complicating the underlying network infrastructure.
2Productivity
If multiple test devices and instruments are connected across distributed locations, then device availability and accessibility are improved, but managing and controlling these devices becomes more complex
Solution Approach 1:
The patent merges the control and management functions of multiple distributed test devices into a unified Distributed Infrastructure Controller (DIC). This consolidation allows users to manage thousands of nodes from a single location, reducing management complexity while maintaining high device accessibility across distributed locations.
Solution Approach 2:
The DIC is designed as a universal controller that can discover, authenticate, and control various types of test devices and instruments from different manufacturers. It provides multi-functional capabilities including device discovery, authentication token management, and centralized control, thereby simplifying the management of heterogeneous distributed devices.
3Reliability
If standard network protocols are used for device communication, then interoperability is achieved, but secure authentication and authorization mechanisms are insufficient
Solution Approach 1:
The patent implements preliminary authentication actions by requiring devices to obtain authentication tokens from the DIC before establishing communication. This pre-authentication mechanism ensures secure access control while maintaining simplicity in the communication protocols themselves, as the security complexity is handled in advance by the DIC.
4Ease of operation
If a centralized control system is implemented to manage distributed devices, then centralized management capability is achieved, but network traffic and controller load increase
Solution Approach 1:
The patent segments the distributed infrastructure into multiple Distributed Infrastructure Controllers (DICs) that can operate independently in different network segments. Each DIC manages a subset of devices locally, reducing the network traffic and load on any single controller while maintaining centralized management capabilities through hierarchical coordination between DICs.
Data Source
AI summary
A method for providing a distributed infrastructure, the method comprising: at a main distributed infrastructure controller (MDIC): sending one or more broadcast or advertisement messages via one or more mechanisms for notifying a client or a sub distributed infrastructure controller (SDIC); initiating an authentication service for authorizing and authenticating incoming connection requests from the client or the SDIC; receiving a connection request from the client or the SDIC; authenticating, using credentials and the authentication service, the connection request, wherein the authentication service generates or obtains an authentication token usable for secure communications; and providing the authentication token to the client or the SDIC.