Network Path Verification via Cryptographic Chaining
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current networking technologies, such as SDN-NFV, lack the ability to guarantee that a specific service is applied to a customer's traffic and do not provide a reliable method for verifying the network path taken by data packets.
Innovation Solution
A method that involves generating and updating cryptographic objects, such as hashes or encrypted versions, at each intermediate node in a network path, allowing for secure and verifiable recording of the network path taken by data packets.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If cryptographic objects are generated and updated at each intermediate node, then network path verification reliability is improved, but device complexity increases
Solution Approach 1:
The network path verification process is segmented into discrete cryptographic operations performed at each intermediate node. Each node generates or updates a cryptographic object (hash or encryption) independently, creating a chain of verifiable segments that collectively prove the complete path. This segmentation allows complex verification to be distributed across multiple simple node operations.
Solution Approach 2:
Cryptographic objects serve as intermediaries between source and destination nodes. Each intermediate node contributes its cryptographic signature to the transaction, creating a verifiable chain of intermediaries. These cryptographic intermediaries prove that specific nodes processed the data without requiring direct communication or trust between endpoint nodes.
2Measurement precision
If cryptographic verification is implemented for network path, then measurement precision of network usage is improved, but loss of time increases
Solution Approach 1:
Cryptographic objects are generated and attached to transactions in advance as they traverse the network, rather than verifying the entire path after completion. Each intermediate node performs its cryptographic operation immediately upon receiving the transaction, building the verification chain progressively. This preliminary action eliminates the need for time-consuming post-hoc verification.
Solution Approach 2:
The patent replaces complex mechanical or procedural verification methods with cryptographic verification. Instead of manually tracking or mechanically verifying each node's participation, the system uses mathematical cryptography (hashing or encryption) to automatically prove path integrity. This substitution dramatically reduces verification time while maintaining high precision.
Data Source
AI summary
A method of recording a network path in a network that includes a plurality of nodes is provided. The network path includes a source node, a destination node, and one or more intermediate nodes. The method includes receiving, at an intermediate node, a transaction, the transaction including a first cryptographic object and signatures of at least a subset of any preceding intermediate nodes in the network path; generating, by the intermediate node, a second cryptographic object based on the first cryptographic object; updating, by the intermediate node, the transaction with a signature of the intermediate node and with the second cryptographic object; and sending, from the intermediate node, the transaction to a succeeding node in the network path. Each cryptographic object allows the transaction to be verified up to the node that generated that cryptographic object. Nodes and a system for implementing the method are also provided.