Blockchain Access Point Clustering for Wireless Roaming
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In centralized network engineering, existing authentication systems incur significant latency and infrastructure overhead when handling user access and roaming in wide area networks, leading to network congestion and connectivity loss due to reliance on remote servers for secure authentication protocols.
Innovation Solution
Clustering remote access points within a local area network using a blockchain network for client device authentication, allowing seamless roaming by sharing and generating authentication credentials locally, thereby avoiding the need for repeated authentication with a core server.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional authentication systems are used with remote servers, then security is maintained, but latency increases and network congestion occurs
Solution Approach 1:
The authentication system is segmented into two parts: initial authentication with the remote server, and subsequent local authentication within the cluster using distributed ledger technology. This segmentation allows security verification to occur locally after the initial remote authentication, reducing latency for subsequent operations.
Solution Approach 2:
A distributed ledger acts as an intermediary between the remote server and local access points. The ledger stores authentication credentials locally, enabling access points to verify user credentials without repeatedly contacting the remote server, thus reducing authentication latency while maintaining security.
2Extent of automation
If remote servers are used for authentication, then centralized control is maintained, but infrastructure overhead and costs increase
Solution Approach 1:
The system segments authentication functions between centralized (initial credential issuance by server) and decentralized (local verification via distributed ledger) components. This reduces infrastructure overhead by eliminating the need for continuous remote server connectivity while maintaining centralized control over credential issuance.
Solution Approach 2:
The distributed ledger enables access points to self-verify authentication credentials locally without requiring continuous interaction with the remote server. Each access point independently validates credentials against the locally stored ledger, reducing infrastructure overhead and operational costs.
3Reliability
If authentication credentials are verified with remote servers, then security is ensured, but network congestion and connectivity loss occur during roaming
Solution Approach 1:
Authentication credentials are preliminarily stored in the distributed ledger before roaming occurs. When a client device roams between access points, the new access point can immediately verify credentials against the local ledger without needing to contact the remote server, ensuring continuous connectivity during roaming.
Solution Approach 2:
The distributed ledger serves as a local intermediary that enables seamless roaming authentication. Client devices can authenticate with any access point in the cluster using the locally stored ledger, eliminating the need for continuous remote server communication and preventing connectivity loss during roaming.
Data Source
AI summary
A method is provided that includes receiving, at a first access point in a local area network, a request from a client device to access a wireless local area network. The method also includes creating authentication credentials for the client device based on an identification of the client device, and transmitting the authentication credentials for the client device to a second access point, wherein the first access point and the second access point share a secure block chain application. The method also includes allowing the client device to roam from the first access point to the second access point without requesting new authentication credentials. A system and a non-transitory, computer-readable medium storing instructions to perform the above method are also provided.