IPv6 Neighbor Discovery Job Security via Encrypted Options
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing IPv6 networks lack effective security measures for multifunction job exchange between devices, particularly in image forming apparatuses, which are vulnerable during Neighbor Discovery processes.
Innovation Solution
A software module or application that utilizes IPv6 Neighbor Discovery Options to create and process security options for job identifiers, ensuring secure communication by generating and verifying security options within Neighbor Solicitation and Advertisement messages.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If IPv6 Neighbor Discovery protocol is used for automatic address configuration, then network connectivity and ease of operation are improved, but job security and reliability deteriorate due to vulnerability during Neighbor Discovery processes
Solution Approach 1:
The patent introduces security options as intermediary elements within the Neighbor Discovery protocol messages. These security options act as mediators that carry job identifiers and authentication information, enabling secure job exchange while maintaining the existing NDP framework for address configuration
Solution Approach 2:
The patent implements preliminary security measures by incorporating security options into Neighbor Solicitation and Advertisement messages before actual job processing begins. This preliminary action establishes authentication and encryption mechanisms in advance, ensuring job security is built into the communication foundation rather than added as an afterthought
2Reliability
If security options are added to Neighbor Discovery messages, then job security is improved, but message complexity and device complexity increase
Solution Approach 1:
The patent merges security functionality with the existing Neighbor Discovery protocol structure by integrating security options directly into the standard message formats (Neighbor Solicitation and Advertisement). This combining approach allows security features to be embedded within the existing protocol framework rather than requiring separate, standalone security mechanisms
Solution Approach 2:
The security options implemented in the patent serve multiple functions: they provide job identifier transmission, authentication, and encryption capabilities all within a single integrated framework. This multi-functionality reduces the need for separate security mechanisms and simplifies the overall software module design
Data Source
AI summary
A method, system and computer program product are disclosed that facilitates exchange multifunction job security using IPv6 Neighbor Discovery, which can include generating a print job on a first node, the first node having a first software module and a first IP filter configured to capture neighbor solicitation messages and sending a neighbor solicitation request with the at least one security option to a second nod. Capturing the neighbor solicitation request via a second IP filter on the second node; validating a digital certificate and decrypting a first encrypted job identifier associated with the neighbor solicitation request using a second software module on the second node. Sending a neighbor advertisement to the first node, the neighbor advertisement including a second encrypted job identifier for the print job and capturing the neighbor advertisement from the second node with the first IP filter, and processing the job on the first node.