LAN Authentication Keying for Secure Access to Local Services
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users face difficulties in securely and efficiently accessing multiple services within a local area network (LAN), often requiring complex login processes and sharing credentials among family members, which compromises security.
Innovation Solution
An authentication method that generates a LAN-specific authentication key based on network characteristics, populates credentials with this key, and uses it to authenticate with applicative devices, simplifying access while enhancing security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If users share the same credentials to connect to services, then ease of operation is improved, but security is degraded
Solution Approach 1:
The patent segments the authentication system by introducing a LAN-level authentication key that is separate from individual service credentials. This allows different authentication layers: LAN access uses the generated key, while individual services can maintain their own security. The segmentation resolves the contradiction by enabling easy LAN-wide access without compromising individual service security.
Solution Approach 2:
The patent introduces an intermediary authentication mechanism (the LAN authentication key generated from network characteristics) that mediates between users and services. This intermediary layer simplifies access for all users while the underlying service credentials remain secure and can be selectively applied based on service requirements.
2Reliability
If complex authentication methods like MFA are implemented, then security protection is improved, but ease of operation deteriorates
Solution Approach 1:
The patent applies partial authentication action by implementing authentication only at the LAN level rather than requiring full MFA for every service access. The authentication key is generated once per LAN connection, providing sufficient security for local network access without the excessive burden of repeated complex authentication for each service.
3Reliability
If individual service credentials are used for each applicative device, then security is improved, but device complexity and operation difficulty increase
Solution Approach 1:
The patent creates a universal authentication key that works across multiple applicative devices within the LAN. This single key serves multiple functions: authenticating to any service, working on any terminal equipment, and providing consistent security. This eliminates the need for users to manage multiple individual credentials while maintaining service-specific security requirements.
Data Source
AI summary
A method for allowing a terminal equipment communicatively connected to a LAN to access data provided by at least one applicative device in communication with the LAN. The method includes generating an authentication key based on information representative of characteristics of the LAN, for the at least one applicative device, populating credentials on the applicative device, the credentials including the authentication key, and, for at least one given applicative device wherein credentials have been populated, authenticating with the given applicative device using the credentials, the access to the data provided by the given applicative device being allowed to the terminal equipment when at least the authenticating is successful.