Edge Root-of-Trust Validation via LiFi Proximity Links
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Endpoint devices in edge infrastructure are vulnerable to physical attacks and network threats due to limited physical security, necessitating a robust security framework to prevent compromise.
Innovation Solution
Implementing a security framework that requires endpoint devices to access security data via an optical wireless communication channel, such as LiFi, to validate a root of trust during startup, sealing functionality if access is denied, thereby limiting operation if out of range or line of sight.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If endpoint devices use traditional network communication for security data access, then device availability is maintained, but security vulnerability increases due to lack of physical proximity requirements
Solution Approach 1:
The patent replaces traditional wireless network communication with optical wireless communication (LiFi) for security data transmission. This substitution enforces physical proximity and line-of-sight requirements, making it mechanically impossible for devices to access security data remotely, thereby resolving the contradiction between maintaining device availability and enhancing security.
Solution Approach 2:
The patent changes the communication parameter from radio frequency (WiFi) to optical frequency (LiFi). This parameter change fundamentally alters the transmission characteristics, requiring line-of-sight and physical proximity, which directly addresses the security vulnerability while maintaining legitimate device access.
2Reliability
If optical wireless communication is implemented for security data access, then security is enhanced through proximity requirements, but device complexity increases
Solution Approach 1:
The patent implements a universal optical wireless communication system that serves multiple functions: security data transmission, device authentication, and proximity verification. By consolidating these functions into a single communication mechanism, the system enhances security without proportionally increasing device complexity.
3Reliability
If security data access is denied to out-of-range devices, then security is improved by preventing remote access, but functionality is limited for legitimate devices
Solution Approach 1:
The patent implements a feedback mechanism where the optical wireless communication system continuously verifies device proximity and line-of-sight conditions. When conditions are met, security data is transmitted and device functionality is restored. When conditions are not met, access is denied. This feedback loop ensures security while maintaining adaptability for legitimate devices.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
Enhances security by reducing the likelihood of endpoint device compromise through enforced proximity and line-of-sight communication, ensuring secure operation and data integrity.
Implementation Method 1
The method may include requesting, via an optical wireless communication channel, that the security manager provide access to the security data
Data Source
AI summary
Methods and systems for managing operation of endpoint devices are disclosed. The operation of the endpoint devices may be managed by requiring that the endpoint devices obtain security data from other devices. If the security data is not obtained, the endpoint devices may seal at least some of their functions from use by users. By limiting the functions of the endpoint devices, malicious parties may be less likely to be able to compromise the endpoint devices. The endpoint devices and other devices may be operably connected via a channel that limits that distance between the endpoint devices and the other devices. If the distance is exceeded, then the endpoint devices may be deprived of access to the security data.