Admission Access Controller Credential Translation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current network access control systems are inefficient due to the need for access control nodes to maintain and verify lists of valid credentials, leading to redundant processing and memory resource utilization across multiple nodes.
Innovation Solution
Implementing an admission access controller that translates client device credentials from one authentication protocol to another, allowing an application authentication system to authenticate the translated credentials and grant network access, thereby reducing the need for local credential storage and verification by access control nodes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If access control nodes maintain and verify credential lists locally, then network access control reliability is improved, but processing and memory resource utilization increases
Solution Approach 1:
The patent extracts the credential storage and verification function from the access control nodes and places it in a centralized cloud-based authentication server. The access control nodes no longer maintain credential lists locally, instead they forward authentication requests to the centralized server which stores and validates credentials. This extraction eliminates the redundant processing and memory resource utilization at each access control node while maintaining centralized credential verification for network security.
2Reliability
If multiple access control nodes each maintain credential lists, then network access control reliability is improved, but device complexity increases due to redundant systems
Solution Approach 1:
The patent merges the distributed credential storage and verification functions of multiple access control nodes into a single centralized cloud-based authentication server. Instead of each node maintaining its own credential list, all nodes communicate with the unified centralized server for authentication. This merging eliminates system redundancy while maintaining reliable network access control through centralized credential management.
3Speed
If access control nodes perform local credential verification, then authentication speed is improved, but processing resource consumption increases
Solution Approach 1:
The patent introduces a cloud-based authentication server as an intermediary between client devices and the network. The access control nodes forward authentication requests to this intermediary server which performs the actual credential verification. This intermediary approach maintains authentication speed by providing dedicated verification capabilities while reducing processing resource consumption at the access control nodes since they no longer perform local credential checking.
Data Source
AI summary
A method comprises obtaining, from a client device, a first set of application authentication credentials formatted in accordance with a first authentication protocol. The first set of application authentication credentials corresponds to a first user profile. The method includes translating the first set of application authentication credentials to a second set of application authentication credentials. The second set of application authentication credentials is formatted in accordance with a second authentication protocol different from the first authentication protocol and corresponds to the first user profile. The method includes providing the second set of application authentication credentials to an application authentication system. The method includes, in response to providing the second set of application authentication credentials to the application authentication system, obtaining, from the application authentication system, an application authentication indicator. In response to determining that the application authentication indicator indicates a successful authentication, granting the client device network access.