Redundant Network Device Authentication via Separate Subnet Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication methods for devices in communication networks, such as IEEE 802.1X, are not designed for redundant communication networks like those configured according to IEC 62439-3 PRP, which are commonly used in industrial automation installations.
Innovation Solution
A method where a device sends authentication requests through separate ports to different subnetworks within a redundant communication network, allowing each subnetwork to authenticate independently, using existing IEEE 802.1X and IEC 62439-3 PRP standards without modifications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a device is connected to a redundant communication network with multiple subnetworks, then communication reliability is improved, but authentication complexity increases because existing authentication methods are not designed for redundant networks
Solution Approach 1:
The authentication process is segmented into separate authentication requests for each subnetwork. The device performs independent authentication with each access point through different communication ports, allowing each subnetwork to be authenticated separately rather than as a single complex unit.
Solution Approach 2:
Authentication is performed as a preliminary action before data transmission begins. The device sends authentication requests to access points in each subnetwork before establishing normal communication, ensuring security is established in advance.
2Reliability
If separate authentication is performed for each subnetwork, then security is improved, but authentication time increases
Solution Approach 1:
Authentication requests are sent periodically to each subnetwork in a structured sequence. The device systematically authenticates with each access point through different ports in an organized periodic manner rather than attempting simultaneous or random authentication.
Solution Approach 2:
Each access point and authentication server performs self-service authentication independently. The authentication infrastructure handles verification processes autonomously without requiring centralized coordination, reducing overall authentication time.
Data Source
AI summary
A method authenticates a device in a communication network. The method includes transmitting authentication information which indicates the device to an authentication server, which permits or rejects the device as a subscriber in the communication network on the basis of the authentication information. In order that an authentication of a device can also be carried out in a communication network configured with redundancy, the communication network contains two subnetworks. The device is connected to both subnetworks for redundant data transmission. At the start, the device sends authentication requests to access points arranged in the first subnetworks. The access points send the respective received authentication information to an authentication server, which authentication server in each case carries out a check of the authenticity of the device on the basis of the respective received authentication information and, as the result of the check, permits or rejects the device as a subscriber.