Distributed Authentication Model for Secure Network Connectivity in Network Separation Technology

• Published in: Sensors (Basel, Switzerland) Vol. 22; no. 2; p. 579
• Main Authors: Park, Na-Eun, Park, So-Hyun, Oh, Ye-Sol, Moon, Jung-Hyun, Lee, Il-Gu
• Format: Journal Article
• Language: English
• Published: Switzerland MDPI AG 01.01.2022; MDPI
• Subjects: Access control; Authentication; Blockchain; Communication; Computer Security; Confidentiality; Connectivity; Data security; Data transmission; decentralized authentication; distributed network; Efficiency; frame structure; Internet of Things; n-factor authentication; Network latency; network separation; Nodes; Separation; Technology; trust level; Usability; Wireless networks; Working conditions; decentralized authentication; frame structure; trust level; distributed network; n-factor authentication; network separation
• ISSN: 1424-8220; 1424-8220
• DOI: 10.3390/s22020579

Considering the increasing scale and severity of damage from recent cybersecurity incidents, the need for fundamental solutions to external security threats has increased. Hence, network separation technology has been designed to stop the leakage of information by separating business computing networks from the Internet. However, security accidents have been continuously occurring, owing to the degradation of data transmission latency performance between the networks, decreasing the convenience and usability of the work environment. In a conventional centralized network connection concept, a problem occurs because if either usability or security is strengthened, the other is weakened. In this study, we proposed a distributed authentication mechanism for secure network connectivity (DAM4SNC) technology in a distributed network environment that requires security and latency performance simultaneously to overcome the trade-off limitations of existing technology. By communicating with separated networks based on the authentication between distributed nodes, the inefficiency of conventional centralized network connection solutions is overcome. Moreover, the security is enhanced through periodic authentication of the distributed nodes and differentiation of the certification levels. As a result of the experiment, the relative efficiency of the proposed scheme (REP) was about 420% or more in all cases.