Fallback Authentication Mechanism for WLAN Security

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Current security mechanisms for wireless local area networks (WLANs) are flawed, making them vulnerable to unauthorized access, and the implementation of the IEEE 802.1x standard for enhanced security is complex and expensive, limiting its widespread deployment, especially in small office/home office (SOHO) settings.

Innovation Solution

The implementation of fallback modes of operation within WLANs using remote authentication procedures, where fallback access control parameters are exchanged between network nodes and authentication servers, allowing for secure communication even when primary authentication processes fail, utilizing methods like EAP TTLS, PEAP, and digital certificates, and employing dynamic WEP or WPA keys.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If IEEE 802.1x authentication procedures are implemented for enhanced wireless network security, then security reliability is improved, but device complexity and implementation cost increase

Engineering Contradiction:

ImprovesecurityVSAvoidimplementation complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent pre-configures access points with fallback authentication parameters and credentials before primary authentication failure occurs. This allows the system to immediately switch to backup authentication methods without requiring complex real-time decision-making or additional infrastructure, thereby maintaining security while reducing implementation complexity.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent introduces a fallback authentication mechanism that acts as an intermediary between the primary 802.1x authentication system and network access. When primary authentication fails or is unavailable, the fallback mechanism provides an alternative path for authentication, simplifying the overall system by handling edge cases without requiring complex modifications to the primary authentication infrastructure.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If IEEE 802.1x authentication procedures are implemented for enhanced wireless network security, then security reliability is improved, but implementation cost increases

Engineering Contradiction:

ImprovesecurityVSAvoidimplementation cost

Core Design Contradiction:

ReliabilityVSEase of manufacture

Solution Approach 1:

The patent uses fallback authentication parameters that are pre-configured copies of authentication credentials stored at the access point. These fallback credentials serve as inexpensive replicas that can be deployed without requiring additional authentication servers or infrastructure, thereby maintaining security reliability while significantly reducing implementation costs compared to full 802.1x deployment.

Inventive Principle:

Principle #26Copying

3Device complexity

If primary authentication processes are used without fallback mechanisms, then device complexity is reduced, but reliability deteriorates due to unauthorized access vulnerabilities

Engineering Contradiction:

Improveauthentication process complexityVSAvoidaccess control reliability

Core Design Contradiction:

Device complexityVSReliability

Solution Approach 1:

The patent prepares fallback authentication parameters in advance and stores them at access points before primary authentication failure occurs. This cushioning mechanism ensures that when primary authentication fails, the system can immediately switch to fallback authentication without compromising security, thereby maintaining reliability without significantly increasing the complexity of the authentication process.

Inventive Principle:

Principle #11Beforehand cushioning (Prior cushioning)

4Reliability

If fallback access control parameters are exchanged and stored at network nodes, then reliability is improved through uninterrupted access, but device complexity increases

Engineering Contradiction:

Improvenetwork access reliabilityVSAvoidnode configuration complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent enables access points to autonomously store and manage their own fallback authentication parameters locally. This self-service capability eliminates the need for complex centralized management systems to handle fallback parameter distribution and updates, thereby improving network access reliability while minimizing the increase in device complexity.

Inventive Principle:

Principle #25Self-service

Data Source

PatentUS20130276060A1Methods and systems for fallback modes of operation within wireless computer networks

Publication Date: 2013.10.17 MCAFEE LLC

AI summary

Described herein are systems and methods for fallback operation within WLANs that rely on remote authentication procedures. When a primary network node authentication process fails, fallback access control parameters associated with a secondary network node authentication process are exchanged between a network node and an authentication server, wherein the secondary network node authentication process allows the network node to access other resources of a computer network.