Link Status Re-Authentication for Secure Ethernet Port Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing security protocols in Ethernet communication are vulnerable to security breaches when legitimate devices go offline abnormally, allowing illegitimate devices to access ports and potentially leak keys, leading to significant security risks.
Innovation Solution
Implementing a security handling method that includes monitoring the status of the link between devices and promptly re-performing mutual authentication or key agreement when the link transitions from online to offline, ensuring timely detection and prevention of illegitimate access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the port remains open after normal disconnection for convenience of reconnection, then the ease of operation is improved, but security is worsened as illegitimate devices can access the port
Solution Approach 1:
The patent applies preliminary action by performing mutual authentication before establishing the communication link and by detecting link status changes before allowing data transmission. The system proactively verifies device legitimacy at critical moments (before connection and upon reconnection) to prevent illegitimate devices from accessing the port, thus resolving the contradiction between ease of reconnection and security.
2Productivity
If key transmission continues after link status change for data continuity, then the productivity is improved, but security is worsened due to potential key leakage
Solution Approach 1:
The patent applies feedback by continuously monitoring the link status between devices and using this information to control key transmission. When the link status changes from online to offline, the system detects this change and suspends key transmission accordingly. This feedback mechanism ensures that keys are only transmitted when the link is confirmed to be online, preventing key leakage while maintaining data transmission continuity when conditions are safe.
3Reliability
If frequent mutual authentication is performed to ensure security, then the security is improved, but the time consumption increases
Solution Approach 1:
The patent applies periodic action by performing mutual authentication at specific intervals rather than continuously. The system conducts authentication before initial connection establishment and upon detecting link status changes (online to offline transitions). This periodic approach ensures security at critical moments while avoiding unnecessary continuous authentication overhead, thus resolving the contradiction between security and time consumption.
Data Source
Figure 1~2
Figure 3
Figure 4
AI summary
This application discloses a security handling method and apparatus, and a storage medium, and relates to the communication field. The method includes: A first device performs a security handling operation with a second device, where the security handling operation includes one or more of the following operations: mutual authentication or key agreement. After successfully performing the security handling operation, the first device monitors a status of a link between the first device and the second device. The first device re-performs the security handling operation with the second device based on a first moment, where the first moment is a moment at which it is monitored that the status of the link changes from an online state to an offline state. This application can improve communication security.