Primary Routing Module Authenticates Redundant Modules for Zero Touch Provisioning

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

In Zero Touch Provisioning (ZTP) for network devices, the bootstrap device cannot directly verify the authenticity of redundant routing modules, leading to potential unauthorized access and malicious attacks.

Innovation Solution

A primary routing module verifies the authenticity of redundant routing modules by obtaining a redundant identifier certificate, establishing a secure connection with a bootstrap device, and verifying a signed certificate chain associated with the network device that includes the redundant routing module.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If the bootstrap device directly provisions redundant routing modules, then provisioning speed is improved, but security is worsened due to inability to verify authenticity

Engineering Contradiction:

Improveprovisioning speedVSAvoidauthentication security

Core Design Contradiction:

ProductivityVSReliability

Solution Approach 1:

The primary routing module acts as an intermediary between the bootstrap device and redundant routing modules. It receives bootstrap information from the bootstrap device and selectively forwards it to redundant routing modules after verifying their authenticity through certificate chains, thus enabling secure provisioning without requiring direct bootstrap device access to each redundant module

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The system performs preliminary authentication of redundant routing modules by verifying their certificate chains against trusted anchors before allowing bootstrap information transfer. This preliminary verification action ensures that only authorized modules receive provisioning data, preventing unauthorized access while maintaining efficient provisioning

Inventive Principle:

Principle #10Preliminary action

2Reliability

If the bootstrap device verifies each redundant routing module directly, then authentication security is improved, but device complexity is worsened

Engineering Contradiction:

Improveauthentication securityVSAvoidprovisioning system complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The primary routing module serves as a mediator that handles authentication complexity. It maintains the logic for verifying certificate chains and managing trusted anchors, while the bootstrap device simply needs to provide bootstrap information to the primary module, which then handles distribution to verified redundant modules

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The authentication and provisioning functions are segmented into distinct roles: the bootstrap device handles initial bootstrap information provision, the primary routing module handles authentication and selective distribution, and redundant routing modules handle receipt and execution. This segmentation reduces complexity at each component level

Inventive Principle:

Principle #1Segmentation

3Ease of operation

If redundant routing modules are provisioned without authentication, then ease of operation is improved, but harmful factors increase due to unauthorized access

Engineering Contradiction:

Improveprovisioning simplicityVSAvoidunauthorized access and malicious attacks

Core Design Contradiction:

Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The system uses disposable certificate-based authentication credentials that are validated once and then discarded. Each redundant routing module presents its certificate chain, which is verified against trusted anchors, and after verification the certificates are not stored long-term but the authentication decision is made permanent for that provisioning session

Inventive Principle:

Principle #27Cheap short-living objects (Disposable)

Solution Approach 2:

The primary routing module as an intermediary enforces authentication by verifying certificate chains before allowing any bootstrap information transfer to redundant modules, thereby preventing unauthorized access and malicious attacks while maintaining simple operation through automated verification

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS12278912B2Facilitating authentication of routing modules associated with one or more network devices to allow zero touch provisioning

Publication Date: 2025.04.15 JUNIPER NETWORKS INC

AI summary

A network device may receive a redundant identifier certificate associated with a redundant routing module, and may provide, to a bootstrap device, a primary identifier certificate associated with a primary routing module associated with the network device. The network device may establish a secure connection with the bootstrap device based on the bootstrap device verifying an authenticity of the primary routing module via the primary identifier certificate. The network device may provide, to the bootstrap device via the secure connection, a redundant routing module identifier associated with the redundant routing module and may receive, from the bootstrap device via the secure connection, a signed certificate chain associated with the redundant routing module. The network device may verify the signed certificate chain and may verify the redundant identifier certificate, associated with the redundant routing module, based on verifying the signed certificate chain.