TSN Message Authentication for Secure Domain Number Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current 5G networks lack the ability to authenticate the authenticity of TSN domain numbers in time-sensitive network messages, leading to potential clock synchronization exceptions, system failures, or network attacks due to the use of forged grand master devices.
Innovation Solution
Implement a method where a first device checks the authenticity of a TSN domain number by comparing it to a valid second domain number obtained from a grand master device certificate, ensuring that only authentic grand master information is used for clock synchronization.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If the 5G network transparently transmits TSN messages without authentication, then message transmission efficiency is improved, but system security deteriorates due to potential forged domain numbers
Solution Approach 1:
The patent applies preliminary action by performing domain number authentication before message transmission. The network device authenticates the TSN domain number in advance by comparing it with the domain number obtained from the grandmaster device certificate, preventing forged messages from being transmitted further in the network.
Solution Approach 2:
The patent uses the grandmaster device certificate as an intermediary to verify the authenticity of TSN domain numbers. The certificate acts as a trusted mediator that contains the legitimate domain number, allowing the network device to compare and verify incoming TSN messages without compromising transmission efficiency.
2Reliability
If the network device checks TSN domain number authenticity, then system security is improved, but message transmission complexity increases
Solution Approach 1:
The patent applies local quality by implementing authentication only at specific network devices (ingress or egress devices) rather than uniformly across all TSN devices. This localized approach maintains security while avoiding unnecessary complexity in devices that do not perform authentication functions.
Solution Approach 2:
The patent uses the domain number from the grandmaster device certificate as a reference copy to verify incoming TSN messages. This copying approach allows simple comparison-based authentication without requiring complex verification mechanisms.
3Reliability
If domain number authentication is implemented, then clock synchronization reliability is improved, but processing time increases
Solution Approach 1:
The patent performs domain number authentication in advance before clock synchronization occurs. By verifying the domain number's authenticity beforehand, the system ensures reliable clock synchronization without requiring re-verification during the time-critical synchronization process.
Solution Approach 2:
The patent changes the verification parameter from complex cryptographic validation to simple domain number comparison. This parameter change maintains synchronization reliability by ensuring authentic domain numbers are used, while significantly reducing processing time through straightforward string comparison.
Data Source
Figure 1
Figure 2A
Figure 2B
AI summary
This application relates to the communication field, and discloses a message transmission method and an apparatus, to resolve a problem of how to check authenticity of a TSN domain number in a time sensitive network message. After receiving a time sensitive network message from a second device through a first communication network, a first device checks, based on a second domain number of a TSN working domain, a first domain number, included in the time sensitive network message, of the TSN working domain, and the first device transmits the time sensitive network message if the check succeeds.