Implicit Challenge Authentication for Non-UICC Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Mobile devices without Universal Integrated Circuit Cards (UICC) or Subscriber Identification Modules (SIM) cards face increased call setup times and operator capital expenditures when accessing telecommunication services over unsecured Wi-Fi networks, as existing authentication methods are resource-intensive and inefficient.
Innovation Solution
Implementing an implicit challenge procedure for network-connected devices to authenticate with an Authentication, Authorization, and Accounting (AAA) server using a previously received nonce value from an Evolved Packet Data Gateway (ePDG) server, reducing the need for explicit challenge messages and optimizing message exchanges.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If explicit challenge-response authentication is used over unsecured Wi-Fi networks, then security is maintained, but call setup time increases and authentication efficiency decreases
Solution Approach 1:
The patent applies preliminary action by having the AAA server pre-generate and store challenge values before they are needed for authentication. When a non-UICC device connects, the server can immediately use pre-computed challenges without waiting to generate them on-demand, thereby reducing call setup time while maintaining security through the same challenge-response mechanism
2Reliability
If non-UICC device authentication is handled through traditional methods, then security is preserved, but operator capital expenditures and hardware costs increase
Solution Approach 1:
The patent implements self-service by enabling AAA servers to autonomously generate and manage authentication challenges without requiring additional dedicated hardware or manual configuration. The server uses its existing resources to compute cryptographic challenges and responses, eliminating the need for expensive specialized authentication hardware for each non-UICC device connection
3Productivity
If challenge values are generated on-demand during authentication, then resource utilization is optimized, but authentication speed decreases
Solution Approach 1:
The patent applies periodic action by having the AAA server generate challenge values in advance during idle periods or in batches, rather than generating each challenge individually when requested. This periodic pre-generation approach balances resource utilization with authentication speed, as the computational workload is distributed over time rather than concentrated during peak authentication demands
Data Source
AI summary
A challenge value is received at a network connected device from a first server. A secure communication channel is established with the first server based on the challenge value. A request is sent from the network connected device to a second server to authenticate with the second server, wherein sending the request comprises sending a challenge response based on the challenge value to the second server prior to receiving a challenge from the second server. A challenge decision is received from the second server at the network connected device. The network connected device authenticates with the second server in response to the challenge decision.