Client Device OTP Authentication for Critical Network Parameters
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current network device configuration systems lack sufficient security, particularly in client devices and external servers, as they rely on single-level authentication, making them vulnerable to unauthorized changes in critical network parameters such as parental control settings and guest SSID management.
Innovation Solution
Implementing a multifactor authentication (MFA) mechanism that uses one-time passwords (OTPs) to authenticate users before allowing changes to critical network parameters, ensuring that only authorized users can modify settings by generating and verifying OTPs via email, SMS, or app notifications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If single-level authentication is used for network device configuration, then ease of operation is improved, but security is worsened
Solution Approach 1:
The authentication process is segmented into multiple independent stages: initial credential verification, OTP generation request, OTP delivery via separate channel, and final OTP verification. Each stage performs a distinct security function, creating layered protection while maintaining operational flow.
Solution Approach 2:
An external server acts as an intermediary between the client device and network controller. This server receives OTP generation requests, delivers OTPs through separate communication channels (SMS, email, voice call), and verifies OTPs before allowing configuration changes. This intermediary adds security without requiring direct integration between the client and network controller.
2Reliability
If multifactor authentication with OTP is implemented, then security is improved, but device complexity is worsened
Solution Approach 1:
The complex OTP generation, delivery, and verification logic is extracted from the client device and network controller, and placed in a dedicated external server. This allows the authentication mechanism to be sophisticated without increasing the complexity of individual devices in the network.
Solution Approach 2:
The external server provides multiple OTP delivery methods (SMS, email, voice call) through a single unified interface. This multi-functional approach allows the system to adapt to different user needs and network conditions without requiring multiple separate systems.
3Reliability
If critical parameters are protected with OTP verification, then reliability is improved, but ease of operation is worsened
Solution Approach 1:
The OTP verification requirement is applied selectively only to critical network parameters (parental controls, guest SSID, network security settings) rather than all configuration changes. This localized security approach protects sensitive areas while leaving routine configurations accessible without additional verification steps.
Solution Approach 2:
The system performs preliminary verification by checking whether a configuration parameter is critical before triggering OTP requirements. This preliminary classification allows the system to automatically determine when security measures are needed, reducing user burden for non-critical changes while maintaining protection for sensitive configurations.
Data Source
AI summary
Aspects of the present disclosure are drawn to client device for use with a network controller and an external server, the network controller being configured to manage a wireless network, to change a critical parameter of the wireless network, to transmit a request for a one time password (OTP). The external server being configured to generate the OTP in response to the request for the OTP, to provide a notification of the OTP and to transmit the OTP to the network controller. The network controller being configured to additionally receive the OTP from the external server. The client device including a memory having a data structure stored therein, the data structure including a list of configurable critical parameters of the wireless network, and including a processor configured to execute instructions stored on the memory to cause the client device to receive a request to configure a configurable parameter of the wireless network. The client device also determines whether the configurable parameter of the wireless network matches a configurable critical parameter of the wireless network within the list of configurable critical parameters of the wireless network. The client device further transmits, when the configurable parameter of the wireless network matches a configurable critical parameter of the wireless network within the list of configurable critical parameters of the wireless network, the request for the OTP. The client device may also receive the notification of the OTP from the external server and access the OTP based on the notification and may transmit the OTP to the network controller.