Role Determination for Network Devices via Timer Negotiation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In secure networks, determining the appropriate role for devices during link establishment can be ambiguous, especially when multiple devices are equally qualified to act as either supplicants or authenticators, leading to uncertainty in role assignment.

Innovation Solution

Assigning role levels with corresponding timer values allows devices to negotiate and assume roles based on their designated levels, with devices suited for authenticator roles having lower timer values, ensuring they expire first and assume the authenticator role, thereby facilitating controlled role determination.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If both devices are equally qualified to act as supplicant or authenticator, then role assignment becomes ambiguous and uncertain, but if a role must be assigned for link establishment, then one device must be designated despite equal qualifications

Engineering Contradiction:
Improverole assignment flexibilityVSAvoidrole determination certainty
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The patent changes the parameter of timer values assigned to different devices based on their role levels. Devices with lower timer values are more likely to have their timer expire first, thereby being selected as authenticator. This parameter change resolves the ambiguity by introducing a deterministic selection mechanism based on timer expiration.

Inventive Principle:
Principle #35Parameter changes

Solution Approach 2:

The patent performs preliminary assignment of role levels and corresponding timer values to devices before the actual link establishment process. This preliminary configuration ensures that when role determination is needed, the outcome is already predetermined by the pre-assigned timer values, eliminating uncertainty during the negotiation process.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If role levels with different timer values are assigned to devices, then role determination becomes deterministic and reliable, but then operator control flexibility may be reduced

Engineering Contradiction:
Improverole determination certaintyVSAvoidoperator control flexibility
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent implements a dynamic role determination mechanism where devices can have different role levels assigned, and the actual role (supplicant or authenticator) is dynamically determined based on timer expiration during link establishment. Operators can flexibly assign role levels and adjust timer values to control which device becomes authenticator, maintaining both reliability and operational flexibility.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The patent introduces timer values as an intermediary mechanism between operator intent and actual role assignment. The timer acts as a mediator that translates the abstract concept of role preference into concrete role determination, allowing operators to indirectly control role assignment through timer configuration rather than direct designation.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS8081568B2Role determination for network devices
Publication Date: 2011.12.20 CISCO TECHNOLOGY INC
  • US8081568B2 patent drawing
  • US8081568B2 patent drawing
  • US8081568B2 patent drawing

AI summary

Techniques for selecting authentication roles when establishing a link between devices in a secure network are provided. By assigning role levels to devices, devices may be more likely to assume a preferred role when establishing a link. For example, during a negotiation process, each device may establish a timer value based on their role level. Each device may initiate a timer with the timer value and, the device whose timer value expires first may assume a role as authenticator.