Key Authentication With Dynamic PSK Binding for No-UI Terminals
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Terminal equipment without graphical interfaces, such as cameras and printers, cannot perform 802.1x or web authentication, necessitating a pre-shared key (PSK) method, which requires manual PSK assignment per user, complicating configuration and reducing authentication efficiency.
Innovation Solution
A key authentication method that determines user information and pre-shared key binding dynamically, allowing registration and authentication based on a single signal, with a registration approval mechanism and encryption-based key matching to simplify the process.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If pre-shared key authentication is used for terminal equipment without graphical interfaces, then authentication capability is provided, but configuration complexity increases due to manual PSK assignment per user
Solution Approach 1:
The system performs self-service by automatically generating and binding pre-shared keys to user information without requiring manual configuration. The authentication server dynamically creates PSKs and associates them with user identifiers, eliminating the need for administrators to manually assign keys to each device.
Solution Approach 2:
The system changes the parameter of key management from static manual assignment to dynamic automatic generation. Pre-shared keys are generated on-demand based on user information and binding relationships, transforming the configuration process from a manual parameter-setting task to an automated system-driven process.
2Reliability
If manual pre-shared key assignment is performed for each user, then user identity authentication is enabled, but authentication efficiency decreases due to repeated registration-authentication switching
Solution Approach 1:
The system merges the registration and authentication processes into a unified operation. By binding pre-shared keys to user information in advance, the system combines what were previously separate steps (registration to obtain PSK, then authentication using PSK) into a single streamlined process where users authenticate directly using their user identifiers.
Solution Approach 2:
The system performs preliminary action by pre-binding pre-shared keys to user information before authentication occurs. This advance preparation eliminates the need for users to undergo separate registration steps to obtain authentication credentials, as the binding relationship is established in advance by the system.
3Productivity
If dynamic key binding is implemented, then authentication efficiency is improved, but security requirements increase due to automated key generation and management
Solution Approach 1:
The system implements feedback mechanisms to monitor and verify the security of dynamic key generation and binding processes. Authentication servers track binding relationships, validate user credentials against stored pre-shared keys, and provide feedback on authentication outcomes, ensuring that automated processes maintain security standards through continuous verification and monitoring.
Data Source
AI summary
A key authentication method, an electronic device, and a storage medium. The key authentication method includes: determining user information based on a key authentication request sent by a user end, where the key authentication request includes the user information and an initial key; determining whether the user information has been bound to a pre-shared key; when the user information has not been bound to a pre-shared key, determining whether the initial key matches a first key, where the first key is used to determine whether the user end has a registration need for a pre-shared key; and when the initial key matches the first key, registering the first pre-shared key for the user end and binding the first pre-shared key to the user information.