Self-Organizing Network Node Authentication Without Centralized Server
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Self-organizing networks (SON) face challenges in establishing secure communication channels without pre-configured authentication parameters, as centralized security servers are costly and reduce network operability.
Innovation Solution
A communication system where each node maintains and auto-discovers security profiles to authenticate and encrypt communication sessions with other nodes, eliminating the need for a centralized security server by using default security profiles provisioned at each access node.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a centralized security server is used to establish credentials and perform node authentication, then node authentication and link security are ensured, but additional investment in cellular infrastructure is required and the operability of the SON is reduced
Solution Approach 1:
Each node in the SON is configured with security profiles that enable it to autonomously authenticate other nodes and establish secure communication channels without requiring a centralized security server. The nodes self-serve their authentication needs using pre-configured security parameters, eliminating the need for additional infrastructure while maintaining security and authentication capabilities
Solution Approach 2:
The centralized security functionality is segmented and distributed to individual nodes. Instead of one central authority, each node possesses its own security profiles and authentication capabilities, allowing the security function to be performed locally at each node rather than through a centralized server
2Ease of operation
If pre-configured security parameters are used for authentication, then secure channel establishment is simplified, but the network loses the self-organizing capability where nodes are auto-discovered and dynamically learn each other's existence
Solution Approach 1:
The security configuration is made dynamic to match the self-organizing nature of the network. Nodes are pre-configured with security profiles that enable them to dynamically authenticate other nodes as they are auto-discovered. The security parameters remain static in configuration but enable dynamic authentication relationships to form as nodes join the network organically
Solution Approach 2:
Security profiles are pre-configured in nodes before deployment, enabling them to perform authentication and secure channel establishment as preliminary actions. This preliminary configuration allows nodes to immediately secure communications upon discovery without requiring complex runtime configuration, thus maintaining both ease of operation and self-organizing capability
Data Source
AI summary
A communication system provides secure communication between two nodes in a self-organizing network without the need for a centralized security or control device. A first node of the two nodes is provisioned with one or more security profiles, auto-discovers a second node of the two nodes, authenticates the second node based on a security profile of the one or more security profiles, selects a security profile of the one or more security profiles to encrypt a communication session between the two nodes, and encrypts the communication session between the two nodes based on the selected security profile. The second node also is provisioned with the same one or more security profiles, authenticates the first node based on a same security profile as is used to authenticate the second node, and encrypts the communication session based on the same security profile as is used for encryption by the first node.