Software-Defined Network Image Synchronization via Blockchain
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Software-defined networks face challenges in securely comparing and synchronizing network images across multiple control apparatuses, especially in distributed or wide area networks, where local manipulations can compromise data stream management and consistency.
Innovation Solution
Incorporating a comparison unit within the control apparatus that stores and manages network images, which compares and synchronizes with a network image published in a blockchain ledger, using a consensus protocol to validate and authenticate changes, ensuring only legitimate updates are applied across the network.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the network image is protected locally in a private area, then security against local manipulations is improved, but the ability to compare network images across multiple control apparatuses in a WAN deteriorates
Solution Approach 1:
The patent introduces a blockchain as an intermediary between control apparatuses. Each control apparatus stores a copy of the network image in the blockchain, which acts as a neutral mediator that both can access and compare. This resolves the contradiction by providing a shared reference point that maintains security (through cryptographic hashing) while enabling comparability (through distributed access).
Solution Approach 2:
The patent creates copies of the network image and stores them in the blockchain. Instead of requiring direct access to the original private network image, control apparatuses can compare copies stored in the blockchain. This maintains the security of the original while enabling widespread comparison through immutable replicas.
2Measurement precision
If the network image is made accessible for comparison across multiple control apparatuses, then the ability to synchronize and detect manipulations is improved, but the vulnerability to attacks and unauthorized changes increases
Solution Approach 1:
The patent applies cryptographic hashing to the network image before storing it in the blockchain. This preliminary action creates a fixed-size hash value that can be safely shared and compared without exposing the original network image. Even if the blockchain is accessible to attackers, the actual network configuration data remains protected, while still enabling precise change detection through hash comparison.
3Stability of the object's composition
If a centralized approach is used to store and compare network images, then consistency across the network is improved, but the system becomes a single point of failure and reduces scalability
Solution Approach 1:
The patent segments the centralized network image storage into multiple distributed copies stored across different control apparatuses in the blockchain. Each control apparatus holds a copy, eliminating the single point of failure. The segmentation maintains consistency through the immutable nature of blockchain technology while improving scalability and reducing architectural complexity.
Data Source
AI summary
Various embodiments include an apparatus for operating a software-defined network having a number of network elements comprising: a memory unit storing an image of the software-defined network; a control unit programmed to use the stored image as a basis for controlling forwarding of data streams by the number of network elements; and a comparison unit programmed to compare the stored image against a network image published in a ledger of a blockchain.