Edge-node authentication data exchange via periodic verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing device authentication methods are vulnerable to malicious access when a single device is compromised, as they do not effectively utilize multiple paired devices or nodes for enhanced security and alert mechanisms.
Innovation Solution
A method for exchanging authentication data between edge-nodes using wireless communication technologies like NFC, Bluetooth, or WIFI, where paired edge-nodes continually verify each other's existence and operability, triggering alerts if one node becomes unresponsive and aggregating authentication data for enhanced security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If single-device authentication is used, then authentication simplicity is maintained, but security against malicious access is weakened
Solution Approach 1:
The authentication system is segmented into multiple independent edge-nodes, each holding a portion of the authentication credentials. No single node contains the complete authentication data, so compromise of one node does not lead to full system compromise. The authentication process is divided across multiple devices that must cooperate to validate credentials.
Solution Approach 2:
Multiple edge-nodes are merged into a unified authentication system where their individual authentication data combines to form complete credentials. The system merges the authentication capabilities of multiple devices, requiring all paired nodes to be present and communicating for successful authentication.
2Reliability
If multiple paired edge-nodes are used for authentication, then authentication security is improved, but device complexity increases
Solution Approach 1:
The paired edge-nodes automatically perform verification communications with each other without requiring manual intervention. The nodes self-manage the authentication process by continuously exchanging verification messages and monitoring each other's presence, eliminating the need for user configuration or manual authentication steps.
Solution Approach 2:
The authentication system implements continuous feedback through verification communications between paired nodes. Each node monitors the other's responsiveness and provides feedback about the authentication state. If a node becomes unresponsive or is separated from its pair, the system detects this through the lack of verification feedback and triggers appropriate security responses.
3Reliability
If continuous verification communications are exchanged between paired nodes, then detection of node separation is improved, but energy consumption increases
Solution Approach 1:
Instead of continuous verification communications, the system uses periodic verification exchanges at defined intervals. This reduces energy consumption while maintaining the ability to detect node separation. The periodic nature allows nodes to enter low-power states between verification cycles while still providing timely detection of separation events.
Data Source
AI summary
A system for exchanging authentication data between edge-nodes is provided. The system may include an edge-node network. The network may include a plurality of edge-nodes. Each edge-node may include a pairing module. Each pairing module may receive an instruction to pair with another edge-node. Each pairing module pair with another edge-node. The pairing module may continually transmit verification communications to other edge-nodes. The pairing module may continually discover responsive communications from other edge-nodes. The pairing module may continually receive responsive verification communications from other edge-nodes. Each edge-node may include an executable module. The executable module may determine occurrence of an event. Upon determination of the occurrence of an event, the executable module may analyze a stored event protocol. The protocol including an algorithm for implementing executables in response to an event. The executable module may determine an executable based on the algorithm, and execute the determined executable.