Hash-Based Network Identifier Distribution for Secure Mobile Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users of mobile devices face inconvenience and time wastage as they can only determine if a wireless network is supported for authorization after connecting to it, and distributing SSIDs of supported networks is not space-efficient and reveals sensitive information to third parties.
Innovation Solution
A method and system where hash values of network identifiers are transmitted from a server to a user terminal, allowing the terminal to determine network support without revealing actual SSIDs, using a hash function to compare and potentially shorten identifiers for matching, thus providing a compact and secure way to distribute network information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the device connects to a network to query whether it is supported, then the user can determine network support status, but the user wastes time and may connect to unsupported networks
Solution Approach 1:
The system performs preliminary action by distributing the list of supported networks to user terminals in advance through multiple channels (broadcast, system messages, pre-fetching). This allows terminals to have the supported networks list available locally before attempting connection, enabling immediate determination of network support status without time-consuming post-connection queries.
2Loss of time
If the system distributes the list of supported networks to user terminals, then the user can determine network support before connecting, but the bandwidth and memory usage increase
Solution Approach 1:
The system changes parameters by transmitting network identifiers in multiple formats: full SSIDs for complete identification, abbreviated SSIDs for space-efficient representation, and hash values for compact comparison. This multi-format approach reduces the quantity of data that needs to be transmitted and stored while maintaining the ability to accurately determine network support status.
Solution Approach 2:
The system extracts only the essential identifying information needed for network support determination. Instead of transmitting complete network configuration data, it extracts and distributes key identifiers (SSIDs, abbreviations, and hash values) that are sufficient for matching and determination purposes, thereby reducing data volume.
3Reliability
If the system distributes full SSIDs of supported networks, then the user terminal can accurately identify supported networks, but sensitive information is exposed to third parties
Solution Approach 1:
The system applies local quality by providing different levels of information identification to different parties. Full SSIDs are made available only to authenticated users and the communication system for accurate network identification, while abbreviated SSIDs and hash values are distributed more broadly for public announcement and comparison purposes, thus protecting sensitive information while maintaining identification accuracy where needed.
Solution Approach 2:
The system introduces hash values as an intermediary element between the full SSID and public distribution. Hash values serve as a secure mediator that allows terminals to compare and determine network support without exposing the actual SSID strings to third parties, thereby maintaining both identification accuracy and information security.
Data Source
AI summary
Method and communication system for distributing information relating to a set of networks from a first node to a second node of the communication system, wherein a set of identifiers of respective networks which belong to the set of networks is stored at the first node. Hash values are generated at the first node for the identifiers in the set of identifiers using a hash function. The generated hash values are transmitted from the first node to the second node. The second node determines an identifier of a particular network which is available for communicating with the second node. The second node generates a hash value for the identifier of the particular network using the hash function. The second node then compares the hash value of the identifier of the particular network generated at the second node with the hash values received at the second node from the first node to thereby determine whether the particular network belongs to said set of networks.