Remote Management Unit for Network Switches
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing remote management systems for network switches lack secure authentication and encryption mechanisms, making them vulnerable to manipulation and eavesdropping, particularly in critical environments like automotive networks.
Innovation Solution
The implementation of remote management circuitry that uses asymmetric cryptography for authentication and generates a symmetric encryption key for secure communication, allowing secure access to configuration registers without relying on a central processing unit (CPU).
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If remote management is implemented without CPU involvement, then remote management efficiency and responsiveness are improved, but security and authentication capabilities deteriorate
Solution Approach 1:
The patent segments the remote management functionality into a dedicated Remote Management Unit (RMU) separate from the CPU. The RMU handles all remote management operations including frame reception, decryption, authentication, register access, and response transmission independently, allowing parallel operation without CPU involvement while maintaining security through dedicated security protocols
Solution Approach 2:
The patent introduces an asymmetric ciphering scheme as an intermediary authentication mechanism between the host device and the RMU. The host device uses asymmetric encryption to authenticate itself to the RMU, and the RMU uses the same mechanism to authenticate itself to the host device, establishing secure communication before any management operations occur
2Reliability
If encryption and authentication mechanisms are added to remote management, then security is improved, but processing overhead and complexity increase
Solution Approach 1:
The patent implements preliminary authentication and key exchange using asymmetric cryptography before any remote management operations. The host device and RMU exchange authentication information and establish symmetric encryption keys in advance, so that subsequent management frames can be securely processed without repeated complex authentication procedures
Solution Approach 2:
The patent replaces complex mechanical/CPU-based security verification with cryptographic mathematical operations. The asymmetric ciphering scheme uses mathematical properties of public-key cryptography to provide security without requiring CPU intervention, substituting cryptographic algorithms for traditional security verification mechanisms
Data Source
AI summary
A network switch includes a plurality of ports for communicating over a network. Processing circuitry processes inbound frames received from the network via the ports and sends outbound frames to the network. Remote management circuitry (RMU) is responsive to commands received from a host device external to the network switch. The RMU receives via one of the ports a remote access request frame from the host device, wherein at least part of the remote access request frame is encrypted, and decrypts the remote access request frame. In response to successful decryption of the part of the remote access request frame, the RMU accesses one or more configuration registers of the network switch in accordance with the remote access request frame, composes a remote access response frame, at least a portion of the remote access response frame being encrypted, and sends the remote access response frame to the host device.