AAA Proxy Key Caching for Wireless Handover
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for mobile devices to access wireless communication networks in dense urban areas are inefficient due to high signaling requirements during authentication and lack of seamless handover between wireless access points, leading to increased resource utilization and data traffic management challenges.
Innovation Solution
Implementing an authentication, authorization, and accounting (AAA) proxy that stores key information for user equipment, allowing for efficient re-authentication and IP connectivity preservation across different wireless access points without requiring continuous signaling with the AAA server, thereby reducing authentication overhead and maintaining network access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If mobile devices switch between wireless access points in dense urban areas, then network coverage and connectivity options are improved, but authentication signaling requirements increase and resource utilization increases
Solution Approach 1:
The AAA proxy performs preliminary actions by pre-establishing and storing key information for user equipment before the user actually needs to access the network. When a user connects to a wireless access point, the system checks if key information is already available in the database. If not, it proactively retrieves and stores the necessary authentication keys from the radiocommunication network, so that subsequent authentication processes are accelerated without requiring real-time signaling.
Solution Approach 2:
The AAA proxy acts as an intermediary component between wireless access points and the radiocommunication network's AAA server. It receives authentication requests from wireless access points, manages the key derivation process, stores retrieved key information locally, and provides these pre-fetched keys to subsequent authentication requests. This intermediary role eliminates the need for continuous real-time communication with the remote AAA server during user mobility scenarios.
2Reliability
If continuous authentication signaling is performed with AAA server, then authentication security is maintained, but authentication overhead increases and network resources are consumed
Solution Approach 1:
The system performs the authentication key retrieval action in advance before the user needs to access the network. The AAA proxy retrieves authentication keys from the radiocommunication network and stores them locally in advance, so that when authentication is actually needed, the keys are already available and can be used immediately without requiring time-consuming real-time signaling with the AAA server.
Solution Approach 2:
The AAA proxy creates a local copy of the authentication key information retrieved from the radiocommunication network. Instead of continuously contacting the remote AAA server for authentication, the system stores copies of the necessary authentication data locally at the AAA proxy. This allows subsequent authentication requests to be fulfilled using the cached key information, dramatically reducing authentication overhead while maintaining security.
3Productivity
If key information is stored at AAA proxy, then re-authentication efficiency is improved, but data storage requirements and memory resources increase
Solution Approach 1:
The AAA proxy implements local quality by storing authentication key information locally at its own location rather than relying on remote server communication. This local storage capability enables fast re-authentication operations without requiring continuous network communication. The system stores only the necessary key information needed for authentication operations, optimizing the balance between local access speed and storage requirements.
Data Source
AI summary
The method of operating a network includes receiving, by an authentication, authorization and accounting (AAA) proxy of the network, authentication information for user equipment from a first wireless access point, the AAA proxy being a proxy for an authentication, authorization and accounting (AAA) server in a radiocommunication network, transmitting, by the AAA proxy, at least the received authentication information to the radiocommunication network, receiving, by the AAA proxy, first key information from the radiocommunication network, generating, by the AAA proxy, second key information based on the first key information and third key information based on the second key information, storing, by the AAA proxy, the first and second key information, and transmitting, by the AAA proxy, the third key information to the first wireless access point, the third key information allowing the user equipment access to a network via the first wireless access point.