Node Authentication via Trust Status and Message Filtering
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Communications networks face challenges in ensuring security and reliability due to hardware and software errors, malicious attacks, and unauthorized access, which can lead to data exposure and network downtime.
Innovation Solution
A method and node design that authenticates nodes within a communications network by setting a trust status for connected nodes, discarding untrusted nodes' network management messages, and performing an authentication protocol using key data to ensure secure communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If all network management messages are accepted from any node, then network operation speed is maintained, but network security is compromised against malicious or malfunctioning nodes
Solution Approach 1:
The system performs preliminary authentication of nodes before allowing them to send network management messages. Each node is assigned a trust status (trusted or untrusted) based on authentication results, and this status is checked before processing messages to determine whether they should be accepted or discarded.
Solution Approach 2:
The system applies different treatment to messages from different nodes based on their individual trust status. Trusted nodes have their messages accepted and processed normally, while untrusted nodes have their messages discarded. This local differentiation allows the system to maintain security while preserving normal operation for authenticated nodes.
2Reliability
If authentication protocols are implemented for all nodes, then network security is improved, but system complexity increases
Solution Approach 1:
The system implements authentication selectively rather than universally. Only nodes that require security protection need to undergo authentication protocols and receive trusted status. Nodes that do not require security can operate without authentication, reducing the overall complexity burden on the system.
3Reliability
If messages from untrusted nodes are discarded, then protection against malicious attacks is enhanced, but legitimate communication may be interrupted
Solution Approach 1:
The system uses a feedback mechanism where nodes can attempt authentication to change their trust status from untrusted to trusted. Once authenticated successfully, nodes receive trusted status and their messages are no longer discarded. This feedback loop ensures that legitimate nodes can restore communication while maintaining protection against truly malicious nodes that cannot authenticate.
Data Source
AI summary
A system and a method for a first node in a communications network to authenticate a second node. The second node is connected by a communications link to a port of the first node. The method comprises setting a status that the second node is regarded as untrusted by the first node, so that the first node discards selected network management messages received over the communications link from the second node while it is regarded as untrusted. The method further comprises performing an authentication protocol with the second node by receiving at least one message from the second node over the communications link. Such message is discarded if it does not form part of the authentication protocol. The first node then treats the second node as trusted if the authentication protocol is successful, so that the selected network management messages received from the second node are no longer discarded.