TLS Authentication Mode Negotiation for Edge Mutual Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current communication network standards do not specify how to achieve mutual authentication between an edge enabler client (EEC) and an edge configuration server (ECS) using specified TLS authentication modes, leading to unclear implementation of secure data communication.
Innovation Solution
A method and apparatus for establishing a transport layer security protocol that enables negotiation of authentication modes between EEC and ECS, allowing for mutual authentication through shared keys or certificates, ensuring secure TLS connections.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If current standards only specify which authentication modes can be used for mutual authentication between EEC and ECS, then the authentication modes are standardized, but the implementation details of how to achieve mutual authentication are not specified
Solution Approach 1:
The patent introduces a negotiation mechanism as an intermediary process between EEC and ECS. The EEC sends a negotiation request indicating supported authentication modes, and the ECS responds with its supported modes, allowing both parties to mutually determine the authentication method without requiring detailed standard specifications for each mode implementation
Solution Approach 2:
The patent implements dynamic authentication mode selection through negotiation. Instead of statically determining authentication modes, the system allows EEC and ECS to dynamically exchange capability information and select appropriate modes based on real-time mutual support, making the authentication process adaptable to different scenarios
2Reliability
If mutual authentication is required for TLS tunnel establishment between EEC and ECS, then communication security is improved, but the authentication process complexity increases
Solution Approach 1:
The patent creates a universal negotiation framework that can accommodate multiple authentication modes (certificate-based, pre-shared key, etc.). This single negotiation mechanism serves multiple functions by handling different authentication types through a unified process, reducing overall system complexity while maintaining security
Solution Approach 2:
The patent segments the authentication process into distinct phases: capability negotiation phase where EEC and ECS exchange supported modes, and execution phase where the selected mode is implemented. This segmentation separates the complex decision-making process from the actual authentication execution, making each part more manageable
Data Source
AI summary
Provided are a method and an apparatus for establishing a transport layer security protocol. The method includes: receiving, by an edge configuration server ECS, first negotiation request information from an edge enabler client EEC, where the first negotiation request information is used to indicate that the EEC supports a first authentication mode; and in a case that the ECS supports the first authentication mode, sending, by the ECS, first negotiation response information to the EEC, where the first negotiation response information is used to indicate that the ECS supports the first authentication mode.