UPnP Access Control via Trusted to Identify ACL
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In UPnP networks, existing access control methods rely on device-based ACLs, which do not effectively utilize personal devices' identity verification capabilities, leading to trust issues regarding user authentication and credential communication.
Innovation Solution
Introducing the Identity Assertion Capable (IDC) attribute for control points and a Trusted to Identify ACL (TIA) feature in devices, allowing for user identity authentication and trust management within the network, enabling secure access control based on user-device asserted identity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If device-based ACLs are used for access control in UPnP networks, then access control functionality is provided, but user identity verification capabilities are not effectively utilized leading to trust issues
Solution Approach 1:
The access control mechanism is segmented into two distinct components: traditional device-based ACLs for controlling access to services, and a new TIA (Trusted to Identify) ACL for verifying control point trustworthiness. This segmentation allows the system to maintain simple device-based access control while adding identity verification capabilities through a separate mechanism, thereby improving reliability without significantly increasing overall system complexity.
Solution Approach 2:
The TIA ACL acts as an intermediary layer between the control point and the device's service access control. Before a control point can invoke services on a device, the device first checks whether the control point is listed in its TIA ACL. This intermediary verification mechanism establishes trust in user authentication without replacing the existing ACL system, thus improving reliability while maintaining compatibility and manageable complexity.
2Reliability
If personal devices' identity verification capabilities are not utilized, then access control based on user identity is weak, but adding identity verification increases system complexity
Solution Approach 1:
The patent implements partial action by applying identity verification only to control points that need to assert user identities, rather than requiring all devices and control points to implement full identity verification capabilities. The TIA ACL is selectively used when identity assertion is required, allowing the system to improve user identity authentication reliability without unnecessarily increasing complexity across the entire network.
Solution Approach 2:
The system introduces a new parameter (TIA ACL trust status) that changes the access control decision-making process. When a control point is listed in the TIA ACL, it is granted trust to assert user identities; when not listed, identity assertion is denied. This parameter change approach allows the system to leverage personal devices' identity verification capabilities without requiring fundamental architectural changes, thus improving reliability with minimal complexity increase.
3Reliability
If TIA ACL is introduced for trust management, then access control efficacy is improved, but compatibility with conventional UPnP security specifications must be maintained
Solution Approach 1:
The TIA ACL mechanism is merged with the existing UPnP ACL framework rather than operating as a completely separate system. Both ACL types coexist within the same access control architecture, with the TIA ACL serving as a prerequisite filter before traditional ACL evaluation. This merging approach allows the system to improve access control efficacy through identity verification while maintaining backward compatibility with conventional UPnP security specifications.
Solution Approach 2:
The TIA ACL verification is performed as a preliminary action before the traditional ACL-based service access control. The device first checks whether the control point is trusted to identify users by consulting the TIA ACL, and only if this preliminary check passes does the system proceed to evaluate the traditional ACL for service-specific permissions. This preliminary action ensures that identity verification is integrated into the access control flow without disrupting existing UPnP security operations, thereby maintaining compatibility while improving efficacy.
Data Source
AI summary
System and methods for managing trust in access control are based on a user identity, in a Universal Plug and Play (UPnP) network. A device has an access control list (ACL), a trusted-to-identify access control list (TIA), and a first TIA management module configured to manage the TIA. A security console is communicatively coupled to the device via the network. The security console has a second TIA management module. The first TIA management module is able to implement an add request from the security console for adding an entry to the TIA. The entry includes a control point identity for a control point communicatively coupled to the device via the network.