IoT Constrained Node Authentication Forwarding Filter
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In the Internet of Things, constrained nodes with limited resources are overwhelmed by forwarding unfiltered authentication information, leading to bandwidth and power consumption issues, which affects overall performance and can cause the network to become paralyzed.
Innovation Solution
A method where constrained nodes verify authentication information upon initial receipt and only forward it after successful verification, while directly forwarding validated information subsequently, using a forward token to authenticate and optimize resource usage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If constrained nodes forward authentication information unconditionally, then authentication information can be transmitted through the network, but bandwidth resources and power supply resources of constrained nodes are exhausted
Solution Approach 1:
The patent applies preliminary action by having constrained nodes perform verification of authentication information before forwarding it. The node checks whether the authentication information is valid and whether it has already been forwarded, so that malicious or duplicate information can be filtered out in advance, preventing resource exhaustion from handling invalid packets.
Solution Approach 2:
The patent introduces an intermediary verification mechanism where constrained nodes act as mediators between clients and resource servers. Instead of blindly forwarding all authentication information, the nodes mediate by verifying the information's validity and forwarding status, thus protecting resource-constrained nodes from being overwhelmed by malicious traffic.
2Productivity
If constrained nodes forward all authentication information, then network communication can proceed, but a large quantity of bandwidth resources are occupied and electric power is consumed quickly
Solution Approach 1:
The patent applies the taking out principle by extracting and filtering out invalid or duplicate authentication information before forwarding. Constrained nodes examine incoming authentication packets, identify those that are malicious or have already been processed, and exclude them from forwarding, thereby reducing bandwidth occupation and power consumption while maintaining legitimate communication.
3Object-affected harmful factors
If authentication information is verified before forwarding, then malicious information can be filtered, but system resources are consumed for verification
Solution Approach 1:
The patent applies partial action by implementing selective verification rather than verifying all authentication information. Constrained nodes perform verification checks on specific critical fields of authentication packets, such as forwarding status flags or validity indicators, rather than conducting full cryptographic verification of every packet. This partial verification approach filters out obvious malicious traffic while consuming minimal additional resources.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Embodiments of the present invention disclose a forwarding method, a forwarding apparatus, and a forwarder for authentication information in the Internet of Things. The method is applied to a constrained node and includes: receiving authentication information; determining whether the authentication information is received for the first time; and if the authentication information is received not for the first time, forwarding the authentication information; or if the authentication information is received for the first time, determining whether the authentication information is valid authentication information, and if the authentication information is not valid authentication information, discarding the authentication information, or if the authentication information is valid authentication information, verifying the valid authentication information, and forwarding the valid authentication information after the verification succeeds. The embodiments of the present invention can reduce resources of the constrained node, and improve performance of the Internet of Things.