AIoT Group Authentication Using Cached Session-Based Device Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing wireless communication systems face challenges in efficiently managing and authenticating large groups of ambient Internet of Things (AIoT) devices, particularly during inventory procedures, due to the stateless nature of the AIoT data management entity (ADM) leading to significant processing loads and scalability issues.
Innovation Solution
The implementation of a cache-based authentication mechanism within the AIoT data management entity (ADM) and enhanced AIoT function (AIOTF) to manage and update a cache of previously authenticated AIoT devices using session identifiers and derivation parameters, enabling group authentication and reducing processing loads while maintaining statelessness.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the AIoT data management entity (ADM) performs authentication for large groups of AIoT devices during inventory procedures, then device authentication reliability is improved, but processing load increases significantly due to stateless operation
Solution Approach 1:
The network function performs preliminary actions by caching authentication results and device information before actual authentication is needed. The cache stores previously authenticated device lists and authentication parameters, allowing the ADM to quickly retrieve and verify authentication status without performing full authentication procedures from scratch, thus reducing processing load while maintaining reliability.
Solution Approach 2:
A cache mechanism is introduced as an intermediary between the AIoT devices and the ADM. This cache stores authentication state information and device lists, acting as a mediator that reduces the direct processing burden on the stateless ADM. The cache enables the system to maintain authentication reliability while significantly improving processing efficiency by avoiding redundant authentication operations.
2Device complexity
If the AIoT data management entity maintains statelessness to simplify operations, then device complexity is reduced, but scalability issues arise during group authentication
Solution Approach 1:
The cache serves as an intermediary layer that enables scalability without compromising the stateless nature of the ADM. It stores authentication state information and device lists, allowing the ADM to handle large groups of devices efficiently. The cache maintains the simplicity of the ADM architecture while providing the scalability needed for group authentication operations.
Solution Approach 2:
The authentication process is segmented into two parts: the stateless ADM that handles authentication logic and the cache that stores state information. This segmentation allows the ADM to remain simple and stateless while the cache handles the scalability requirements by storing and retrieving authentication state data for large groups of devices.
3Reliability
If the network performs group authentication for all AIoT devices, then authentication completeness is improved, but processing time increases due to evaluating all devices
Solution Approach 1:
The system performs preliminary actions by pre-authenticating devices and caching their authentication results. When group authentication is needed, the system retrieves previously authenticated devices from the cache and only performs authentication checks on devices that are not yet authenticated, significantly reducing processing time while maintaining completeness.
Solution Approach 2:
Instead of performing full authentication on all devices in every group authentication operation, the system uses partial action by relying on cached authentication results for previously authenticated devices. This allows the system to achieve authentication completeness for the current operation without the excessive processing time that would result from re-authenticating all devices.
Data Source
AI summary
Various aspects of the present disclosure relate to (e.g., authenticating, verifying, authorizing, validating) ambient Internet of Things (AIOT) devices identified by filtering information, permanent identifiers, T-IDs, and so on. For example, an AIoT data management (ADM) entity may perform group authentication of AIOT devices, where the ADM manages and updates a cache of previously authenticated AIOT devices (for group inventory procedures). The ADM may identify the previously authenticated AIOT devices using a session ID (e.g., one specific to an inventory procedure), a derivation parameter, or other parameters.


