Peer-to-Peer Routing Using Shared Network Security Capabilities
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current networking technologies face inefficiencies in establishing secure routes through networks due to the lack of consideration for network devices' security capabilities, leading to increased time and effort in configuring paths that meet security criteria.
Innovation Solution
Network devices share their security capabilities and metrics with peers or a central controller, allowing for the determination of routes that satisfy specific security criteria, such as AES encryption and bandwidth, using modified routing algorithms that incorporate security characteristics.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If routing paths are established without considering network device security capabilities, then routing configuration is simpler and faster, but network security posture deteriorates
Solution Approach 1:
The patent applies preliminary action by having network devices pre-share their security capabilities and metrics with peers or central controllers before route establishment. This allows routing algorithms to pre-determine secure paths without requiring complex security configurations during actual route setup, thus improving network security posture while maintaining configuration simplicity.
Solution Approach 2:
The patent introduces an intermediary mechanism where security capabilities and metrics are shared through a standardized interface between network devices and routing entities. This intermediary layer abstracts the complexity of security capability verification, allowing routing decisions to consider security factors without increasing operational complexity for network administrators.
2Reliability
If encryption is added to routes after path establishment, then security is improved, but time and effort for configuration increases
Solution Approach 1:
The patent applies preliminary action by determining secure routes with appropriate encryption capabilities during the initial routing path establishment process, rather than adding encryption after the path is created. The routing algorithm selects paths based on shared security capabilities and metrics, ensuring encryption is inherently part of the route configuration from the start, thus maintaining route security while reducing configuration time.
3Reliability
If security capabilities are shared among all network devices, then route security is improved, but information security risks increase
Solution Approach 1:
The patent applies local quality by allowing network devices to selectively share their security capabilities and metrics with specific peers or central controllers based on local security policies and trust relationships. Different devices can share information with different entities according to their specific security requirements, thus improving route security while minimizing information security risks through localized, controlled information sharing.
Data Source
AI summary
Systems and methods for sharing security capabilities of network devices are disclosed. A system for a first network device includes a memory. The system also includes one or more processors, coupled to the memory, to receive, at the first network device, security capabilities of a second network device of a network. The network includes the first network device and the second network device. The one or more processors are further to modify a routing table of the first network device based on the security capabilities of the second network device and transmit a data packet based on the modified routing table.