Authentication Server Security Parameter Exchange

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Network connections between user devices expose them to security risks, potentially leaking sensitive information during voice calls, video calls, or message transmissions.

Innovation Solution

A system and method that ensures secure exchange of security parameters between user devices through authentication servers, using multiple layers of authentication to establish a secure connection and encrypt/decrypt messages, while preventing parameter exchange if the receiving device is not subscribed to the authentication server.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If security parameters are exchanged between user devices via network, then secure connection can be established, but network traffic increases and security risks are exposed

Engineering Contradiction:
ImprovesecurityVSAvoidnetwork traffic
Core Design Contradiction:
ReliabilityVSQuantity of substance

Solution Approach 1:

The patent extracts the security parameter exchange process from the general network communication flow and handles it through a dedicated authentication server. This separation allows security-critical operations to be isolated and optimized, reducing unnecessary network traffic for routine communications while maintaining security.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The authentication server performs security parameter exchange and authentication before actual communication begins. By establishing security credentials in advance, the system avoids repeated security handshakes during communication, thereby reducing overall network traffic.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If authentication server verifies device subscription before parameter exchange, then security is enhanced, but additional network activity is required

Engineering Contradiction:
ImprovesecurityVSAvoidnetwork activity
Core Design Contradiction:
ReliabilityVSQuantity of substance

Solution Approach 1:

The system performs subscription verification through authentication server before allowing security parameter exchange. This preliminary authentication step ensures that only authorized devices receive security parameters, preventing wasteful network activity with unauthorized devices.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The authentication server acts as an intermediary between user devices and the network. It mediates the subscription verification process, allowing the system to enhance security through centralized authentication while the intermediary handles the overhead, keeping the actual communication flow efficient.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Reliability

If multiple layers of authentication are implemented, then security is improved, but device complexity increases

Engineering Contradiction:
ImprovesecurityVSAvoidauthentication process
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The authentication server serves as an intermediary that handles multiple layers of authentication logic. Instead of implementing complex multi-layer authentication within each user device, the server centralizes this complexity, performing sequential authentication checks while user devices only need to communicate basic credentials.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The authentication server performs self-service by automatically verifying device credentials, checking subscription status, and managing security parameter distribution without requiring complex client-side authentication logic in user devices. This transfers the computational burden of multi-layer authentication to the server.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS8990554B2Network optimization for secure connection establishment or secure messaging
Publication Date: 2015.03.24 VERIZON PATENT & LICENSING INC
  • US8990554B2 patent drawing
  • US8990554B2 patent drawing
  • US8990554B2 patent drawing

AI summary

A first device is configured to receive an instruction to establish a secure connection with a second device or to send a secure message to the second device. The instruction may include a secure connection invitation or a message. The first device may send information, associated with the second device, to a first server; receive a response from the first server; obtain parameters based on the response indicating that the second device is subscribed to the first server; communicate the parameters to the first server; receive a parameters identifier associated with the parameters; store the parameters identifier in the secure connection invitation or the message; and send the secure connection invitation or the message to the second device. The second device may receive the parameters identifier to obtain the parameters to establish the secure connection or to decrypt the secure message.