Guest LAN Access Control via Trusted Terminal Authorization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems allow visitor devices unrestricted access to home networks, including internet and personal files, with no control over access duration or application usage, posing security and management challenges for gateway owners.
Innovation Solution
Implement a method where a first terminal, acting as a gateway, requests authorization from a trusted terminal to validate or deny access requests from visitor terminals, using a human-machine interface to control access to specific applications and durations based on user input.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a visitor terminal is granted access to the local network using a security key, then the visitor can access network applications and resources, but the gateway owner loses control over access duration, application usage, and network security
Solution Approach 1:
The patent segments network access control by creating a separate guest network portion that is isolated from the main private network. The gateway is divided into a first portion (handling guest access) and a second portion (handling private network access), allowing independent control of access permissions, duration, and application usage for visitors while maintaining security of personal resources.
Solution Approach 2:
The patent introduces an intermediary access control mechanism between the visitor terminal and the local network resources. This intermediary system validates access requests, enforces time limits, restricts application usage, and automatically disconnects guests when authorization expires, thereby maintaining network security while enabling controlled visitor access.
2Adaptability or versatility
If the gateway owner provides unrestricted access to visitor devices, then network resources are easily accessible, but the gateway owner cannot prevent unauthorized usage or control access duration
Solution Approach 1:
The patent implements dynamic access control where visitor permissions are not static but change over time. The system automatically adjusts access duration based on pre-set time limits, dynamically restricts application usage based on authorization levels, and automatically terminates connections when time expires or unauthorized activities are detected, thereby preventing unauthorized usage while maintaining resource accessibility.
3Reliability
If the gateway owner wants to interrupt visitor access, then security can be maintained, but all connected terminals including the owner's own devices are affected
Solution Approach 1:
The patent segments the network into distinct guest and private portions, allowing the gateway owner to independently manage and interrupt only guest access without affecting personal devices. The gateway maintains separate connection management for visitor terminals versus authorized private terminals, enabling selective disconnection of unauthorized users while preserving legitimate connections.
Data Source
Figure 1
Figure 2
Figure 3~4
AI summary
The invention relates to a request processing for access to one or more applications available on a local network, in which: - a first terminal (TER-1) is adapted to give access to the local network to a visitor terminal (TER-V) issuing a request to access at least one application on the local network, - the first terminal being connected via the local network (10) to a second terminal (TER-2), trusted, available to a user authorized to give an authorization to access the application, - the second terminal being identified by the first terminal as having rights to validate or refuse an access request from a visitor terminal.The following steps are planned in particular, implemented by the first terminal: - upon receiving a request to access an application on the local network, the first terminal transmits to the second terminal a first message containing at least one access request information, and - condition the visitor terminal's access to the required application on the local network, upon receiving a second, return message from the second terminal (TER-2) containing at least one request validation information.