Source Authentication in Network Nodes via Link Identifier Matching
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Communications networks face challenges in ensuring the security and reliability of data transmission, particularly in preventing unauthorized access and malicious attacks that can exploit weaknesses in the network, leading to data exposure or network unavailability.
Innovation Solution
A method and apparatus for authenticating incoming packets in a network by associating source identifiers with links and comparing them to ensure legitimacy, using registers to store and verify source identifier ranges, and implementing this process in nodes such as switches within the network to discard unauthorized packets and raise error notifications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If source authentication is implemented in network nodes, then network security is improved, but device complexity increases
Solution Approach 1:
The patent applies preliminary action by pre-configuring source identifier associations with link identifiers in the routing table before packet transmission. When a packet arrives, the node only needs to verify if the source identifier matches the pre-stored association, rather than performing complex real-time authentication. This reduces processing complexity while maintaining security.
Solution Approach 2:
The patent uses copying by storing source identifier information in the routing table structure, which already contains destination identifier mappings. Instead of implementing a separate authentication database, the system copies the source identifier association into the existing routing table framework, simplifying the node structure while enabling authentication functionality.
2Reliability
If packet authentication is performed at every node, then data integrity is improved, but processing time increases
Solution Approach 1:
The patent extracts only the essential authentication function - comparing source identifier against routing table entries - while leaving other packet processing functions unchanged. This minimal extraction approach performs necessary verification without adding significant processing overhead, maintaining data integrity while minimizing time loss.
Solution Approach 2:
The routing table is designed to serve multiple functions: traditional destination-based routing and source authentication verification. By making the routing table universal, the system eliminates the need for separate authentication lookup structures, reducing processing time while maintaining data integrity checks at each node.
3Reliability
If source identifier verification is implemented, then unauthorized access prevention is improved, but network throughput decreases
Solution Approach 1:
By pre-configuring source identifier associations in the routing table before operation, the system enables rapid verification during packet transmission. This preliminary setup eliminates the need for complex real-time authentication queries, maintaining access control effectiveness while minimizing impact on network throughput.
Solution Approach 2:
The system copies source identifier verification into the existing routing table lookup process, which is already optimized for high-speed operation. This integration allows authentication to occur alongside standard routing decisions without adding separate verification steps, preserving network throughput while preventing unauthorized access.
Data Source
AI summary
One embodiment of the invention provides a method of handling an incoming packet at a node in a network. The method includes associating at least one source identifier with a link into the node. A packet is then received at the node over the link, and a source identifier is extracted from the received packet. The extracted source identifier is compared with the source identifier(s) associated with the link in order to authenticate the packet.