Industrial Network Device Onboarding via Authentication and Config Files
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for onboarding devices into multi-tenant virtual networks require pre-configured devices with specific default settings, and lack a standardized mechanism for granting access, making them inflexible and inefficient.
Innovation Solution
A method and industrial network configuration that allows devices to onboard without specific default settings, using an authentication module to verify devices and send configuration files for access authorization, enabling flexible and secure access to multi-tenant virtual networks through an access network and onboarding network.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If devices are pre-configured with specific default settings before access, then access authorization can be verified, but device flexibility and ease of integration are reduced
Solution Approach 1:
The system performs preliminary actions by creating a temporary onboarding network and pre-configuring authorization rules before the device actually needs access. The authorization decision is made in advance through the authentication module, and the configuration file is prepared beforehand, allowing the device to join without pre-configuration while maintaining security.
Solution Approach 2:
An onboarding network acts as an intermediary between the external device and the main virtual network. This intermediate network allows devices to connect temporarily for configuration purposes without requiring them to be pre-configured for the main network, thus improving both flexibility and security.
2Productivity
If a standardized onboarding mechanism is implemented, then integration efficiency improves, but device-specific customization options may be limited
Solution Approach 1:
The system changes parameters dynamically by generating device-specific configuration files that contain tailored authorization rules, network parameters, and access permissions. These parameters are adjusted based on the device type, authorization level, and specific network requirements, allowing standardization in process while maintaining flexibility in output.
3Reliability
If devices require specific default settings for access, then network security is maintained, but onboarding complexity increases
Solution Approach 1:
The device performs self-service by automatically receiving and applying the configuration file obtained from the onboarding network. The device configures itself with the appropriate authorization settings and network parameters without requiring manual pre-configuration or complex setup procedures, thus maintaining security while reducing complexity.
Data Source
AI summary
A method for onboarding a device in a multi-tenant virtual network of an industrial network is provided. The method includes: receiving an onboarding request of the device relating to an access to the multi-tenant virtual network of the industrial network; identifying and checking the device using an authentication module of the industrial network; transmitting a configuration file to the device in the event of a positive result of the check; configuring the device according to the configuration file received by the device; checking the access authorization of the configured device at an access point of the industrial network; and, in the event of a positive result of the check, granting the device access to the multi-tenant virtual network. An industrial network configured to carry out the aforementioned method is also provided.