Combined Credential Authentication for Wireless Terminal Latency Reduction

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Conventional authentication systems incur significant latency due to multiple authentication processes required for wireless terminals, leading to inefficiencies in seamless handovers and increased network login times.

Innovation Solution

A method for performing multiple Pre-Shared Key (PSK) based authentication in a single procedure by generating a combined credential using a user identifier and PSK, which is then used to authenticate with an authentication server, reducing the number of required authentication steps and latency.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If multiple independent authentications are performed sequentially, then authentication security is improved, but network latency increases

Engineering Contradiction:

Improveauthentication securityVSAvoidnetwork latency

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The patent combines multiple independent authentication procedures (device authentication and subscription authentication) into a single unified authentication process. The authentication server performs multiple PSK-based authentication checks in parallel within one interaction sequence, allowing the terminal to complete both device authentication and subscription authentication simultaneously rather than sequentially, thereby reducing network latency while maintaining security

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The patent pre-configures multiple Pre-Shared Keys (PSKs) in both the terminal and authentication server before the authentication process. These PSKs are prepared in advance for different authentication types (device PSK, subscription PSK), enabling the authentication server to quickly verify multiple credentials without requiring additional key exchange or setup during the actual authentication, thus reducing latency

Inventive Principle:

Principle #10Preliminary action

2Reliability

If multiple authentication procedures are implemented, then access control reliability is improved, but handover efficiency deteriorates

Engineering Contradiction:

Improveaccess control reliabilityVSAvoidhandover efficiency

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The patent merges multiple authentication verifications into a single authentication transaction. When a terminal needs to perform both device authentication and subscription authentication, the system combines these into one unified process where the authentication server validates multiple PSKs in parallel, enabling seamless handovers without requiring multiple separate authentication exchanges

Inventive Principle:

Principle #5Merging (Combining)

3Reliability

If separate authentication protocols are used for different authentication types, then authentication security is improved, but system complexity increases

Engineering Contradiction:

Improveauthentication securityVSAvoidsystem complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements a universal PSK-based authentication mechanism that can handle multiple authentication types (device authentication, subscription authentication, and their combinations) through a single unified protocol. The authentication server and terminal use the same PSK challenge-response framework for all authentication scenarios, eliminating the need for separate authentication protocols while maintaining security through proper PSK management and verification

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS8621577B2Method for performing multiple pre-shared key based authentication at once and system for executing the method

Publication Date: 2013.12.31 SAMSUNG ELECTRONICS CO LTD

AI summary

A method and apparatus for performing a multiple Pre-Shared Key (PSK) based authentication in a single procedure is described, where the multiple PSK based authentication generates a combined credential in a terminal by using a plurality of credentials including a user identifier and the PSK, and authenticates the terminal in an authentication server by using the combined credential.