Diskless Client Authentication via Network Filter and External Server
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing diskless client authentication methods require modification of de facto software and firmware, limiting their applicability and desirability for widespread use.
Innovation Solution
A diskless client authentication system utilizing an authentication server and a filter on the communication path between the client and file server, employing standard hardware-based management authentication to permit or prohibit communication based on client authentication status, without modifying the client or server.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If authentication methods (MAC address, public key, line authentication) are implemented in diskless clients, then client authentication capability is improved, but device complexity increases and firmware modification is required
Solution Approach 1:
The patent introduces an authentication server as an intermediary component that handles all authentication processing externally. The server communicates with the diskless client through standard network protocols (DHCP, TFTP, NFS) without requiring any authentication functionality to be embedded in the client itself. This mediator approach allows authentication capability to be added to the system while keeping the client device simple and unchanged.
2Reliability
If authentication functionality is integrated into diskless client firmware, then authentication reliability is improved, but ease of manufacture deteriorates due to firmware modification requirements
Solution Approach 1:
The authentication server acts as an external intermediary that performs all authentication operations. The server intercepts and processes authentication requests using standard network protocols, eliminating the need to modify client firmware. This approach maintains authentication reliability while preserving ease of manufacture by keeping the client hardware and firmware unchanged.
3Adaptability or versatility
If standard authentication protocols are adopted, then adaptability improves, but device complexity increases due to additional authentication components
Solution Approach 1:
The authentication server serves as a versatile intermediary that can implement multiple authentication protocols (MAC address authentication, public key authentication, line authentication) while the client remains simple. The server handles protocol complexity externally, allowing the system to support multiple authentication methods without increasing client device complexity. The client only needs basic network communication capabilities.
Data Source
AI summary
A diskless client authentication system (10) includes an authentication server (100) and a filter (230) on a communication path between the diskless client (280) and a file server (200) storing a startup file. An authentication server (100) includes: an address assignment unit that assigns a network address to a diskless client (280); an authenticating unit that authenticates the diskless client (280) to which the network address has been assigned; and a client control unit that instructs the authentication unit to authenticate the diskless client (280) when the diskless client (280) to which the network address has been assigned is in an unauthenticated state, and instructs the authentication unit to permit communication between the diskless client (280) and a file server (200) when the authentication is successful.