Endpoint Node Hash Authentication for Low-Bandwidth Work Orders
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In multiple node environments with limited network connectivity, the overhead of transmitting lengthy certificate chains for authentication and authorization of work order requests is significant, leading to inefficient communication bandwidth usage.
Innovation Solution
Endpoint nodes store public keys and hash lists of trusted entities, allowing them to authenticate requests without full certificate chains, and only request missing credentials when needed, using cryptographic hashes to verify authorization.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If full certificate chains are transmitted for authentication, then authentication reliability is improved, but communication overhead increases
Solution Approach 1:
The patent extracts only the essential authentication elements (public keys and cryptographic hashes) from the complete certificate chain, transmitting only these critical components rather than the full certificate structures. This reduces the quantity of data transmitted while preserving the core authentication functionality.
Solution Approach 2:
The authentication process is segmented into two phases: first transmitting compact authentication credentials (public keys and hashes), then optionally requesting additional certificate details only when needed. This segmentation allows the system to minimize initial communication overhead while maintaining the ability to verify authentication reliability when required.
2Reliability
If certificate chains are transmitted for every work order request, then authorization verification is improved, but bandwidth usage increases
Solution Approach 1:
The system performs preliminary authentication using compact public keys and cryptographic hashes before processing work order requests. By establishing trust credentials in advance and storing them at endpoint nodes, the system eliminates the need to transmit full certificate chains with each request, thereby reducing bandwidth consumption while maintaining authorization verification capability.
Solution Approach 2:
The patent changes the parameter of authentication data from complete certificate chains (large size) to essential authentication elements like public keys and cryptographic hashes (compact size). This parameter change maintains the fundamental authentication and authorization verification functions while dramatically reducing the data volume that consumes bandwidth.
3Speed
If complete authentication credentials are stored at endpoint nodes, then authentication speed is improved, but storage requirements increase
Solution Approach 1:
The patent extracts only the essential authentication elements (public keys and cryptographic hashes) that are needed for rapid verification, storing only these critical components at endpoint nodes rather than complete certificate chains. This extraction approach enables fast authentication while minimizing storage requirements by keeping only the most frequently accessed authentication data.
Data Source
AI summary
An endpoint node of a multiple node environment includes a storage and a processor. The storage stores a public key for an owner of the endpoint node and a hash list. The processor receives, from a requestor node, a request including a work order for an operation to be performed in the endpoint node. In response to reception of the request, the processor determines whether the requestor node is authorized to provide the work order for the operation to be performed. In response to the requestor node not being authorized, the processor provides a prove authentication request. The processor further receives the requested authorization data. Based on the request authorization data, the processor performs the operation in the work order of the request.