Access Point Key Matching for Faster Wi-Fi Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication systems in wireless networks face computational intensity and time-consuming pre-shared key matching processes, leading to connectivity delays and scaling constraints, particularly in managing large numbers of access points and passphrases.
Innovation Solution
A computer network device, such as an access point, performs key matching by identifying passphrases and encryption keys, offloading this process from authentication computers, thereby reducing the computational burden on central servers and enabling scalable authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If authentication computers perform pre-shared key matching by systematically performing calculations on multiple possible pre-shared keys, then authentication can be achieved, but the process becomes computationally intense and time-consuming causing connectivity delays
Solution Approach 1:
The patent divides the authentication function into two segments: the access point stores and processes pre-shared keys locally, while the authentication computer only receives the final authentication result. This segmentation moves the computationally intense key matching from the authentication computer to the access point, reducing authentication computer workload and eliminating connectivity delays caused by waiting for key matching results from the authentication computer.
Solution Approach 2:
The patent extracts the key matching function from the authentication computer and assigns it to the access point. The access point is taken out as the entity that performs pre-shared key matching locally, while the authentication computer is freed from this computationally intense task. This extraction resolves the contradiction by eliminating the time loss associated with the authentication computer performing key matching.
2Reliability
If authentication computers perform pre-shared key matching, then authentication can be achieved, but the number of access points and pre-shared keys supported is restricted due to computational constraints
Solution Approach 1:
The patent segments the authentication functionality by having each access point store and process its own pre-shared keys locally. This segmentation allows each access point to independently support multiple passphrases without burdening the authentication computer with the computational load of key matching for all access points. Consequently, the system can scale to support a larger number of access points and passphrases while maintaining authentication reliability.
Solution Approach 2:
The patent implements self-service by enabling access points to perform their own key matching using locally stored pre-shared keys. Each access point serves itself by autonomously processing authentication requests and matching keys, rather than relying on the authentication computer to perform key matching for all access points. This self-service capability dramatically increases the system's adaptability to support more access points and passphrases.
3Reliability
If authentication computers perform pre-shared key matching, then authentication can be achieved, but the authentication computer becomes overwhelmed or a bottleneck during authentication
Solution Approach 1:
The patent segments the authentication processing by moving key matching operations from the authentication computer to individual access points. This segmentation eliminates the bottleneck where the authentication computer would be overwhelmed by processing key matching for multiple access points simultaneously. Each access point handles its own authentication locally, dramatically improving overall authentication throughput and eliminating the authentication computer as a bottleneck.
Solution Approach 2:
The patent extracts the key matching function from the authentication computer and assigns it to access points. This extraction removes the computationally intense key matching task from the authentication computer, preventing it from becoming overwhelmed. The authentication computer is left only with receiving authentication results, which significantly improves authentication throughput and eliminates the bottleneck.
Data Source
AI summary
A computer network device that performs key matching is described. While attempting to establish a secure connection with an electronic device, the computer network device may receive a connection-request message associated with the electronic device. In response, the computer network device may provide a context message addressed to a computer, where the context message requests stored passphrase information associated with the electronic device. Then, the computer network device may receive, associated with the computer, a context response. When the context response indicates that there is no stored passphrase information associated with the electronic device, the computer network device may perform the key matching to identify the passphrase associated with the electronic device. Next, the computer network device may provide, addressed to the computer, the identified passphrase associated with the electronic device or an encryption key corresponding to the identified passphrase for storage by the computer.