Edge Authentication Negotiation Using HPLMN Capability Provisioning
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing edge computing systems lack efficient negotiation procedures for authentication, particularly in roaming scenarios, and fail to consider home public land mobile network (HPLMN) capabilities, leading to authentication selection failures when shared mechanisms are absent.
Innovation Solution
Introduce techniques for edge configuration servers (ECS) to handle negotiation procedures, including HPLMN capability provisioning and support for both independent and integrated authentication mechanisms, enabling seamless authentication in roaming scenarios.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If authentication negotiation procedures are implemented in edge computing systems, then authentication capability is improved, but system complexity increases due to multiple authentication mechanisms and HPLMN capability provisioning
Solution Approach 1:
The patent introduces an edge configuration server (ECS) as an intermediary component that centralizes the management of authentication mechanisms and HPLMN capability provisioning. The ECS receives authentication mechanism indications from UEs, determines appropriate mechanisms, and provides configuration information to edge enabler servers, thereby resolving the complexity of coordinating multiple authentication mechanisms across distributed edge computing elements
Solution Approach 2:
The authentication system is segmented into distinct functional components: the UE that supports multiple authentication mechanisms, the ECS that manages authentication configuration and HPLMN capabilities, and the edge enabler server that executes authentication. This segmentation allows each component to handle specific tasks independently, improving overall system reliability while managing complexity through functional separation
2Adaptability or versatility
If multiple authentication mechanisms are supported for roaming scenarios, then adaptability is improved, but negotiation procedure complexity increases
Solution Approach 1:
The patent implements preliminary action by having the UE indicate supported authentication mechanisms in advance during the initial connection establishment with the edge data network. The ECS also pre-provisions HPLMN capability information before authentication is required. This preliminary exchange of capability information simplifies the subsequent authentication negotiation by eliminating the need for complex real-time discovery and negotiation procedures
Solution Approach 2:
The edge configuration server is designed with multi-functionality to handle various authentication mechanisms (including EAP-based and non-EAP-based mechanisms), roaming scenarios, and HPLMN capability provisioning through a single unified interface. This universal design allows the system to adapt to different authentication requirements without requiring separate specialized components for each scenario
3Reliability
If HPLMN capability information is provisioned for authentication, then authentication success rate is improved, but information management complexity increases
Solution Approach 1:
The system implements self-service by automatically provisioning HPLMN capability information from the home public land mobile network to the edge configuration server without requiring manual configuration. The ECS autonomously receives, stores, and manages this capability information, and automatically uses it to determine appropriate authentication mechanisms, eliminating the need for complex manual information management while improving authentication success rates
Data Source
AI summary
An edge configuration server (ECS) is configured to receive a request from a user equipment (UE), the request indicating one or more authentication mechanisms supported by the UE, select an authentication mechanism to be used by the UE for access to an edge data network and transmit a response to the request to the UE, the response indicating the selected authentication mechanism.