Derived Credential Service for Delegated Network Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication systems for devices, particularly mobile devices and IoT devices, lack control over agent security services, leading to inefficiencies and security vulnerabilities in connecting to core networks and accessing external networks.
Innovation Solution
A derived credential service generates a derived credential based on hardware module credentials, allowing it to perform delegated functions such as VPN connections, remote signing, and zero trust network access on behalf of the device without impacting the device's configuration or functionality.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If agent security services are used for device authentication, then device access to core networks is enabled, but security control and management for mobile devices and IoT devices is inadequate
Solution Approach 1:
The patent introduces a derived credential service as an intermediary between the device and external networks. This service generates derived credentials from the device's hardware module credentials and uses them to perform delegated functions such as establishing VPN connections, providing zero trust network access, and enabling remote signing capabilities. The intermediary handles security control and adaptation, resolving the contradiction between reliable security control and versatile device access management.
2Reliability
If derived credential service performs delegated functions, then security and confidentiality services are enhanced, but additional device configuration is avoided
Solution Approach 1:
The derived credential service operates autonomously to perform delegated functions on behalf of the device. It automatically generates derived credentials, establishes secure connections, and manages authentication without requiring additional configuration on the device side. The service monitors device status and refreshes credentials as needed, providing self-service that enhances security while maintaining simplicity for the end device.
Data Source
AI summary
One or more computing devices, systems, and/or methods for hosting a derived credential service for implementing delegated functions are provided. Credentials of a hardware module within a device and authentication of the device with a core network are used to generate a derived credential. The derived credential is mapped to a subscriber associated with the device so that the derived credential service can perform delegated functions over a network, different than the core network, on behalf of the device.