Access Control Device Rate Limiting Authentication Packets
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The 'avalanche effect' occurs when a large number of terminals simultaneously perform authentication, overwhelming the access controller and causing authentication processes to be interrupted, leading to inefficiencies in the system.
Innovation Solution
Implementing an access control device that restricts the rate of authentication start packets when certain conditions are met, such as excessive packet arrival rates or high packet loss, to prevent the avalanche effect and ensure smooth authentication processes for all terminals.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the access controller restricts the rate of received authentication packets to prevent overload, then the access controller is protected from being overwhelmed, but authentication processes of terminals are interrupted and system authentication efficiency deteriorates
Solution Approach 1:
The access controller performs preliminary actions by detecting authentication packet rates and proactively adjusting rate limits before the controller becomes overwhelmed. This early intervention prevents the avalanche effect while maintaining authentication efficiency, as the controller can gradually adapt the rate limit rather than suddenly restricting all packets
Solution Approach 2:
The system implements feedback mechanisms where the access controller continuously monitors authentication packet rates and adjusts rate limits based on current system load and authentication success rates. This dynamic feedback loop ensures the controller remains stable while minimizing interruptions to legitimate authentication processes
2Ease of operation
If terminals restart authentication immediately after being interrupted, then authentication attempts are quickly resumed, but the authentication packet rate remains very high causing continuous interruptions
Solution Approach 1:
The access controller applies periodic rate limiting that allows authentication packets to pass during periods when the system can handle them, and restricts packets during high-load periods. This periodic modulation of the rate limit prevents continuous interruptions while still allowing terminals to resume authentication, breaking the avalanche effect cycle
Solution Approach 2:
The rate limit parameter is made dynamic rather than static, adjusting in real-time based on system conditions. When authentication success rates drop or packet rates spike, the limit tightens; when conditions improve, the limit relaxes. This dynamic adjustment allows terminals to resume authentication smoothly without causing continuous overload
Data Source
Figure 1~2
Figure 3A
Figure 3B
AI summary
An access control device and an authentication control method are disclosed, where the method includes: detecting whether a packet that arrives at an access control device is an authentication start packet, where the authentication start packet is used to start an authentication process of a terminal that sends the authentication start packet; and restricting a rate at which the access control device receives an authentication start packet. It is detected whether the packet that arrives at the access control device is an authentication start packet, and the rate at which the access control device receives the authentication start packet is restricted. The rate at which the authentication start packet is received is restricted to control a quantity of terninals that enter subsequent authentication, which avoids an avalanche effect of wireless authentication caused when an excessively large quantity of terminals enter subsequent authentication simultaneously, and ensures that a terminal that already performs subsequent access authentication currently can complete an entire authentication process smoothly, thereby achieving an effect of improving system authentication efficiency.