Backchannel Authentication Node for 5G ID Linkage via Web Push
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In the conventional 5G communication system, the ID linkage for browsers started in an execution environment not under direct user control is not implemented, hindering the provision of network computing resources and execution environments to subscribers.
Innovation Solution
A network node is introduced to execute an authentication procedure by treating the network execution environment as a relying party, utilizing a UDR to identify users and perform Web-push authentication, enabling ID linkage through a CRMF session establishment, modification, and release procedures.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a browser is started in an execution environment not under direct user control, then network computing resources and execution environments can be provided to subscribers, but ID linkage cannot be implemented in conventional 5GS
Solution Approach 1:
The patent introduces a back channel authentication mechanism as an intermediary between the uncontrolled execution environment and the user's terminal. The authentication server acts as a mediator that receives authentication requests from the execution environment, communicates with the user's terminal through web push notifications, and establishes trusted ID linkage. This resolves the contradiction by enabling ID linkage (improving reliability) while maintaining the ability to provide computing resources in uncontrolled environments (preserving adaptability).
2Reliability
If authentication is performed in uncontrolled execution environments, then ID linkage can be established, but authentication complexity increases
Solution Approach 1:
The patent implements self-service authentication where the user's terminal autonomously handles authentication by receiving web push notifications and automatically responding to authentication requests. The execution environment itself participates in the authentication process by initiating requests and receiving results, eliminating the need for complex manual authentication procedures. This reduces authentication complexity (improving ease of operation) while maintaining ID linkage capability (preserving reliability).
Solution Approach 2:
The authentication server is designed with multi-functionality, handling both traditional authentication scenarios and back channel authentication for uncontrolled environments. The system uses universal web push notification technology that works across different devices and platforms, simplifying the authentication mechanism while maintaining broad applicability. This reduces complexity by using a unified authentication approach (improving ease of operation) while enabling ID linkage in diverse scenarios (preserving reliability).
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A network node includes: a reception unit configured to receive a backchannel authentication request from a network node having a function related to computing resources; and a transmission unit configured to perform an inquiry to a UDR (User Data Repository) in order to identify a user based on an identifier included in the backchannel authentication request. The transmission unit transmits a Web-push authentication request to a terminal of the identified user, the reception unit receives a response to the Web-push authentication request from the terminal, and the transmission unit transmits a success of the back channel authentication request to the network node.