Network Configuration Attestation via Trusted Component
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In software-defined networks (SDNs), there is a lack of trust in the management of individual network elements by administrators, as the SDN controller dynamically configures them, making it necessary to verify network configurations without relying solely on the controller, ensuring secure and verifiable attestation of network configurations.
Innovation Solution
Network elements include a trusted component, such as a Trusted Platform Module (TPM), to abstract and digitally sign their configuration rules, providing attestation proof to verifiers, ensuring the integrity and identity of the configuration, including software measurements.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If SDN controller dynamically reconfigures network elements, then network flexibility and adaptability are improved, but trust and verification of network configuration integrity deteriorate
Solution Approach 1:
A trusted component (TC) is introduced as an intermediary between the network element and the SDN controller. The TC independently verifies the integrity of configuration rules and generates attestation proofs, mediating the trust relationship without preventing dynamic reconfiguration by the SDN controller.
Solution Approach 2:
The network element is segmented into a main control unit and a separate trusted component. The TC is isolated from the main control logic and specifically responsible for verifying configuration integrity, allowing dynamic reconfiguration while maintaining independent verification capability.
2Reliability
If network administrators directly manage network hardware, then trust and control are improved, but device complexity and management overhead increase
Solution Approach 1:
The trusted component acts as an intermediary that automates verification of configuration integrity. Instead of administrators manually verifying each configuration, the TC automatically generates cryptographic proofs, reducing management complexity while maintaining trust.
Solution Approach 2:
Manual administrative verification is replaced with automated cryptographic verification performed by the trusted component. The mechanical process of administrative oversight is substituted with automated digital attestation mechanisms.
3Ease of operation
If SDN controller manages individual network elements, then ease of operation is improved, but measurement and verification of configuration accuracy deteriorate
Solution Approach 1:
The trusted component serves as a mediator that provides precise measurement and verification of configuration integrity. It independently checks configuration rules and generates cryptographic proofs, enabling accurate verification without complicating the SDN controller's management functions.
Solution Approach 2:
The trusted component creates a cryptographic copy or hash of the configuration rules for verification purposes. This digital representation allows precise measurement and comparison of configuration integrity without affecting the original configuration management process.
Data Source
AI summary
A computing device having instructions that when executed by a processor may: receive, from a verifier, a request for attestation of a current network configuration of the computing device; identify network configuration rules, each network configuration rule specifying an action to be taken by the computing device in response to receiving a particular type of network traffic; generate, for each network configuration rule, a rule abstraction that represents the network configuration rule; provide data representing each rule abstraction to a trusted component; receive, from the trusted component, response data comprising i) data representing each rule abstraction, and ii) a digital signature; and provide the response data to the verifier as attestation proof of the current network configuration of the computing device.