NIC-Based Secure Time Routing Across Heterogeneous Networks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Computing devices in a heterogeneous network may lose secure system time due to power loss, lack of security abilities, and varying computing resources, leading to inaccurate time settings and compromised time servers.
Innovation Solution
Implement a method to efficiently and securely obtain time by using a network interface controller (NIC) to sort neighbor lists based on trust and cost values, validate time server certificates, and establish secure routes to ensure accurate time synchronization.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If computing devices use heterogeneous network with varying security abilities and computing resources, then network adaptability is improved, but time synchronization reliability deteriorates due to power loss and lack of security abilities
Solution Approach 1:
The patent introduces a time server as an intermediary component that provides centralized time synchronization services to heterogeneous computing devices. The time server acts as a mediator that maintains accurate time despite the varying capabilities of client devices, resolving the contradiction by centralizing the timekeeping function while allowing devices to have different security and computing characteristics
Solution Approach 2:
The patent implements preliminary actions by pre-establishing secure communication channels and validating device certificates before time synchronization occurs. The system performs advance security checks and establishes trusted relationships, ensuring that time synchronization can proceed reliably even when devices experience power loss or have varying security abilities
2Device complexity
If computing devices lack security abilities or experience power loss, then device simplicity is improved, but secure time maintenance deteriorates
Solution Approach 1:
The time server serves as an intermediary that compensates for the lack of security abilities or power sources at individual devices. Instead of requiring each device to maintain secure time independently, the system uses the time server as a mediator that provides time synchronization services, allowing simple devices without advanced security features to still maintain accurate time
Solution Approach 2:
The patent implements self-service mechanisms where devices automatically obtain time synchronization services from the time server without requiring manual configuration or advanced security capabilities. The system provides time services autonomously to devices regardless of their individual security abilities or power state, resolving the contradiction by making time maintenance independent of device complexity
3Reliability
If the system validates time server certificates and establishes secure routes, then time synchronization security is improved, but network communication complexity increases
Solution Approach 1:
The patent performs preliminary security validation by checking device certificates and establishing secure communication routes before time synchronization occurs. The system validates authentication credentials and establishes trusted relationships in advance, which simplifies the actual time synchronization process while maintaining high security standards
Solution Approach 2:
The time server acts as an intermediary that handles complex security validation and certificate verification centrally. This approach simplifies the network communication from the client perspective, as devices only need to communicate with the time server rather than performing complex peer-to-peer security checks, thus improving security without significantly increasing client-side complexity
Data Source
AI summary
A method of securely providing a trusted time to a first device may include receiving at a network interface controller (NIC) a neighbor list comprising a plurality of entries for a corresponding plurality of neighbor devices wherein each of the plurality of entries includes a unique device identity of a time server which the plurality of neighbor devices has reached, and an inception time of a time server certificate corresponding to the unique device identity. The method may further include sorting the plurality of entries within the neighbor list to obtain a sorted neighbor list and sending a time request to a first neighbor device of the plurality of neighbor devices based at least in part on the sorted neighbor list.