Trust-Based Routing Path Selection for Secure Data Transmission
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Data networks face security concerns due to untrustworthy routers that can compromise information transmission, particularly in terms of geographical location and security, leading to potential interception or theft of sensitive information.
Innovation Solution
A method and apparatus determine a trust level of a path through a plurality of routers by transmitting a path setup message, receiving trust level information from each router, and evaluating it to ensure a sufficient trust level for secure data transmission, using RSVP-TRUST messages with new object extensions for geographic location and certificate data insertion.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If traditional routing based on bandwidth and delay is used, then network efficiency is improved, but security and trustworthiness of the transmission path deteriorate
Solution Approach 1:
The patent segments the routing decision process into two independent components: traditional performance metrics (bandwidth, delay) and trust metrics (geographic location, security credentials, router ownership). This allows the system to evaluate multiple paths based on performance while separately evaluating their trustworthiness, resolving the contradiction by enabling selective path selection that satisfies both efficiency and security requirements
Solution Approach 2:
The patent introduces an intermediary trust evaluation mechanism that acts as a mediator between the routing protocol and the security requirements. The trust message format and evaluation process serve as an intermediary layer that assesses router trustworthiness without disrupting the underlying performance-based routing infrastructure, allowing both traditional efficiency metrics and new security metrics to coexist
2Speed
If paths are selected based on performance characteristics alone, then transmission speed is improved, but vulnerability to interception and unauthorized access increases
Solution Approach 1:
The patent implements preliminary action by evaluating and establishing trust credentials for routers before data transmission occurs. The trust message is exchanged and evaluated in advance during path setup, allowing the system to pre-identify secure paths that meet both performance and security requirements before sensitive information is transmitted, thereby preventing rather than reacting to potential interception risks
3Reliability
If trust level evaluation is implemented in the path setup process, then security of information transmission is improved, but complexity of path selection increases
Solution Approach 1:
The patent applies universality by designing a multi-functional trust message format that consolidates multiple trust evaluation criteria (geographic location, security credentials, router ownership, custom metrics) into a single standardized structure. This universal message format can be adapted to different security requirements and router types without requiring separate evaluation mechanisms for each criterion, thereby managing complexity through standardization
Data Source
AI summary
A method and apparatus determine a trust level of a path through a plurality of routers by an endpoint by transmitting a path setup message requesting a path reservation for a first path through a subset of the routers, by receiving in response to transmission of the path setup message a trust level message containing trust level information inserted by each router in the first path through the subset, and by evaluating the inserted trust level information to determine if the first path has a sufficient trust level. Another method and apparatus gather trust level information from a router by receiving a trust level message into which a trust level of the router can be inserted, by inserting trust level information of the router into the trust level message, and by re-transmitting the trust level message on a designated path.