Derived Device Credentials for Subscription-Free Network Authentication

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Electronic devices lacking a subscription to a telecommunications network cannot directly access the network, as they depend on a gateway device with a subscription, necessitating a solution for independent network access.

Innovation Solution

The electronic device communicates with an authentication support system over a first network to obtain a derived device identifier and credential based on a gateway device's identifier and credential, enabling it to access the telecommunications network without a direct subscription.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If an electronic device uses a gateway device's subscription to access the telecommunications network, then the electronic device can access the network without its own subscription, but the electronic device cannot independently access the network and remains dependent on the gateway device

Engineering Contradiction:

Improvenetwork access capabilityVSAvoiddependency on gateway device

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent creates a derived subscription by copying and transforming the gateway device's subscription parameters. The authentication support system generates a derived device identifier and derived credential that are based on the gateway device's identifier and credential, allowing the electronic device to present credentials that the network recognizes as valid without requiring the actual gateway device to be present.

Inventive Principle:

Principle #26Copying

Solution Approach 2:

The authentication support system acts as an intermediary between the gateway device's subscription and the electronic device's access request. It receives the gateway device's identifier and credential, processes them to create derived credentials, and provides these to the electronic device, thereby mediating the authentication process and enabling independent access.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Ease of operation

If an electronic device obtains derived subscription parameters from an authentication support system, then it can authenticate independently, but it requires additional communication infrastructure and processing

Engineering Contradiction:

Improveindependent authenticationVSAvoidauthentication support system infrastructure

Core Design Contradiction:

Ease of operationVSDevice complexity

Solution Approach 1:

The electronic device is enabled to perform authentication operations independently by providing it with derived credentials that it can use on its own. The device can present the derived device identifier and derived credential to the network autonomously without requiring real-time communication with the gateway device or authentication support system during the actual authentication process.

Inventive Principle:

Principle #25Self-service

3Quantity of substance

If the gateway device maintains its subscription for multiple electronic devices, then multiple devices can access the network, but each device cannot be individually authenticated by the network

Engineering Contradiction:

Improvenumber of connected devicesVSAvoiddevice identification accuracy

Core Design Contradiction:

Quantity of substanceVSMeasurement precision

Solution Approach 1:

The patent segments the gateway device's single subscription into multiple derived subscriptions, one for each electronic device. The authentication support system generates a unique derived device identifier and derived credential for each electronic device based on the gateway device's credentials and the device's own identifier, allowing the network to individually recognize and authenticate each device while maintaining the connection through the gateway device's original subscription.

Inventive Principle:

Principle #1Segmentation

Data Source

PatentEP4457975B1Authentication support for an electronic device to connect to a telecommunications network

Publication Date: 2026.02.04 KONINK KPN NV

Figure 1~2A
Figure 2B~2C
Figure 3

AI summary

The disclosure pertains to an electronic device, an authentication support system and a telecommunication system for a telecommunications network enabling the electronic device to access the telecommunications network without a subscription. One aspect of the disclosure involves the electronic device to provide an electronic device identifier over the first network to the authentication support system. The electronic device is also configured to receive at least a derived device identifier and a derived device credential from the authentication support system over the first network. The derived device identifier may be based on at least the gateway device identifier and the electronic device identifier. The derived device credential may be based on at least the gateway device credential and the electronic device identifier. The electronic device is configured to include the derived device identifier in the network access request and transmit the network access request including the derived device identifier to the second network. The derived device credential may also be stored in the electronic device to enable the electronic device to participate in an authentication procedure with the telecommunication system. The electronic device may be configured to participate in the authentication procedure with the telecommunication system over the second network in response to the network access request and to use the derived device credential received in the authentication procedure with the telecommunication system.