Layer 2 Address Acquisition With Hash-Chained Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing Layer 2 address acquisition methods lack reliable linkage between successive messages, making them susceptible to forgery and confusion, particularly in self-assignment and server-assigned protocols, especially in environments with virtual machines and IoT devices.
Innovation Solution
Implementing hash chaining by including hash tokens in messages to ensure authenticity, using a hash function to recursively generate a series of values that are difficult to invert, allowing verification of message origin and integrity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional Layer 2 address acquisition methods are used, then the process is simple and fast, but the messages are susceptible to forgery and lack reliable linkage between successive messages
Solution Approach 1:
The patent applies preliminary action by pre-generating a hash chain of multiple hash values (H1, H2, H3, ...) before message transmission. Each message in the sequence uses a pre-computed hash value from this chain, ensuring authenticity is built in advance rather than computed during transmission. This resolves the contradiction by establishing reliable message linkage through pre-prepared cryptographic credentials.
Solution Approach 2:
The patent introduces hash tokens as intermediary elements that mediate between the sender and receiver to verify message authenticity. These hash tokens serve as cryptographic intermediaries that provide reliable linkage between successive messages without requiring complex real-time verification protocols, thus improving reliability while maintaining protocol simplicity.
2Reliability
If hash chaining is implemented to ensure message authenticity, then forgery resistance improves, but the computational overhead and message size increase
Solution Approach 1:
The hash chain is pre-computed and stored locally before message exchange begins. This preliminary computation shifts the computational burden to an offline phase, allowing the actual message transmission to use simple lookups and comparisons rather than intensive real-time hash computations, thereby reducing online computational overhead while maintaining strong forgery resistance.
Solution Approach 2:
The patent uses hash values as compact copies or representations of the original data rather than transmitting the full data repeatedly. Each hash token is a fixed-size cryptographic fingerprint that provides authentication without requiring transmission of the entire message content multiple times, reducing energy consumption for data transmission while maintaining security.
Data Source
AI summary
A method for performing self-assignment Layer 2 address acquisition implemented by a client device. The method includes the client device selecting a Media Access Control (MAC) address and generating an outgoing test message that includes a first hash token to test an availability of the selected MAC address. The first hash token includes a K generation hash (HK) value of a seed known only to the client device, where K is an integer value greater than one. The method further includes the client device sending the outgoing test message; determining based on a response to the outgoing test message or a lack of a response to the outgoing test message that the selected MAC address is not in use, and using the selected MAC address based on the determination that the selected MAC address is not in use.