Authentication Server Security Parameter Exchange
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Network connections between user devices expose them to security risks, potentially leaking sensitive information during voice calls, video calls, or message transmissions.
Innovation Solution
A system and method that ensures secure exchange of security parameters between user devices through authentication servers, using multiple layers of authentication to establish a secure connection and encrypt/decrypt messages, while preventing parameter exchange if the receiving device is not subscribed to the authentication server.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If security parameters are exchanged between user devices via network, then secure connection can be established, but network traffic increases and security risks are exposed
Solution Approach 1:
The patent extracts the security parameter exchange process from the general network communication flow and handles it through a dedicated authentication server. This separation allows security-critical operations to be isolated and optimized, reducing unnecessary network traffic for routine communications while maintaining security.
Solution Approach 2:
The authentication server performs security parameter exchange and authentication before actual communication begins. By establishing security credentials in advance, the system avoids repeated security handshakes during communication, thereby reducing overall network traffic.
2Reliability
If authentication server verifies device subscription before parameter exchange, then security is enhanced, but additional network activity is required
Solution Approach 1:
The system performs subscription verification through authentication server before allowing security parameter exchange. This preliminary authentication step ensures that only authorized devices receive security parameters, preventing wasteful network activity with unauthorized devices.
Solution Approach 2:
The authentication server acts as an intermediary between user devices and the network. It mediates the subscription verification process, allowing the system to enhance security through centralized authentication while the intermediary handles the overhead, keeping the actual communication flow efficient.
3Reliability
If multiple layers of authentication are implemented, then security is improved, but device complexity increases
Solution Approach 1:
The authentication server serves as an intermediary that handles multiple layers of authentication logic. Instead of implementing complex multi-layer authentication within each user device, the server centralizes this complexity, performing sequential authentication checks while user devices only need to communicate basic credentials.
Solution Approach 2:
The authentication server performs self-service by automatically verifying device credentials, checking subscription status, and managing security parameter distribution without requiring complex client-side authentication logic in user devices. This transfers the computational burden of multi-layer authentication to the server.
Data Source
AI summary
A first device is configured to receive an instruction to establish a secure connection with a second device or to send a secure message to the second device. The instruction may include a secure connection invitation or a message. The first device may send information, associated with the second device, to a first server; receive a response from the first server; obtain parameters based on the response indicating that the second device is subscribed to the first server; communicate the parameters to the first server; receive a parameters identifier associated with the parameters; store the parameters identifier in the secure connection invitation or the message; and send the secure connection invitation or the message to the second device. The second device may receive the parameters identifier to obtain the parameters to establish the secure connection or to decrypt the secure message.


