Authentication System Traffic Redirection for Network Reliability
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In mobile communication systems, authentication processes create significant network traffic when authorization nodes experience degraded performance, leading to potential network shutdowns due to repeated authorization requests.
Innovation Solution
The system redirects network authorization traffic when an authentication node's performance degrades, by determining if the authentication function is throttled and re-routing requests to a different authentication node, and stops redirection once the original node recovers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If users repeatedly send authorization requests when the authorization node is down or degraded, then the user attempts to obtain authorization, but network traffic increases significantly and may bring down the entire network
Solution Approach 1:
The patent introduces a network entity (such as a gateway or controller) that acts as an intermediary between users and the authorization node. This intermediary monitors the status of the authorization node and intercepts authorization requests before they reach the degraded node. When degradation is detected, the intermediary redirects traffic to alternative authorization nodes or queues requests, preventing traffic accumulation while maintaining authorization availability.
2Reliability
If the authorization system uses multiple encryption algorithms and electronic keys to ensure security, then authentication security is improved, but the authorization process takes more time to execute
Solution Approach 1:
The patent implements pre-computation and pre-caching of cryptographic elements. Encryption keys and authentication data are pre-generated and stored in secure caches at network entities closer to users. When authorization is needed, the system retrieves pre-computed cryptographic materials rather than performing full encryption algorithms in real-time, significantly reducing execution time while maintaining security through verified cryptographic protocols.
Solution Approach 2:
The authorization process is divided into multiple segments: initial authentication (performed less frequently), session establishment, and periodic re-authentication. The patent implements tiered encryption where different levels of security are applied at different stages - full cryptographic verification at initial authentication, then lighter-weight cryptographic checks for subsequent authorizations within the same session, reducing overall processing time while maintaining security.
3Reliability
If the authorization node is deep within the network, then security is improved by hiding the authorization system, but more hops are required for communication increasing traffic and delay
Solution Approach 1:
The patent places intelligent network entities (gateways, controllers, or edge computing devices) at the network periphery that serve as intermediaries. These entities maintain secure connections to the deep authorization node while providing local authorization capabilities. They cache authorization data and can perform preliminary authentication locally, reducing the number of hops required for most authorization requests while the deep authorization node remains securely positioned for final verification.
Data Source
AI summary
The method and system may determining whether an authentication function operating on an authentication node on a network has degraded performance such as when the traffic is being partially throttled. In response to determining that the authentication function operating on the authentication node on a network is being partially throttled, a re-direct message may be communicated to at least one edge device on the network that requests of the authentication function on the authentication node be re-directed to a different authentication node.