Trust-Based Authentication in SDN Clusters
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In Software Defined Networking (SDN) clusters, the lack of trustworthiness evaluation in node elections leads to potential malicious nodes gaining privileged positions, causing insider attacks and disrupting cluster services, as existing implementations do not account for the trustworthiness of nodes during Seed Node and Primary Node elections.
Innovation Solution
A method and SDN controller that verify the authenticity of nodes joining a cluster by calculating a trust level based on the number of verified references, determining their role within the cluster, and ensuring secure management of roles through a distributed and flexible authentication system.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If nodes are allowed to join and leave clusters frequently to provide elasticity, then cluster flexibility and adaptability are improved, but authentication security and trust management become more difficult
Solution Approach 1:
The system performs preliminary authentication and trust level calculation before allowing a node to join the cluster. The SDN controller verifies the authenticity of joining nodes by calculating their trust levels based on reference information from existing cluster members, ensuring security is established in advance rather than reacting to potential threats after admission.
Solution Approach 2:
The patent introduces trust level as an intermediary metric that mediates between node admission requests and cluster security requirements. Instead of binary accept/reject decisions, the system uses continuous trust level measurements to determine the extent of access and privileges granted to joining nodes, enabling flexible yet secure integration.
2Device complexity
If traditional authentication methods are used without trust level calculation, then device complexity is reduced, but malicious nodes can gain privileged positions causing insider attacks
Solution Approach 1:
The system changes the authentication parameter from simple binary verification to continuous trust level calculation. By introducing trust level as a quantitative parameter based on reference information from multiple sources, the system transforms authentication from a static check to a dynamic evaluation that adapts to node behavior and cluster requirements.
Solution Approach 2:
The trust level calculation mechanism implements feedback by continuously monitoring node behavior and adjusting trust levels accordingly. Nodes that exhibit malicious behavior or fail to meet trust thresholds receive reduced privileges or are expelled from the cluster, creating a self-regulating security system that responds to threats in real-time.
3Reliability
If trust level calculation based on verified references is implemented, then node authentication security is improved, but processing time and computational overhead increase
Solution Approach 1:
The system applies partial verification by calculating trust levels based on a selected subset of reference information rather than requiring complete verification of all possible references. This allows the system to achieve sufficient authentication security without the full computational overhead of exhaustive verification, balancing security requirements with processing efficiency.
Data Source
AI summary
A method of managing a node in a cluster of nodes in an SDN network. The method comprising receiving from the node a request to join the cluster and a list of references authenticating the node. The references are verified and if the referenced passed the verification the node is allowed to join the cluster. Then a trust level of the node is calculated based on the number of verified references, wherein a role of the node in the cluster depends on the trust level of said node.