Multi-Method Port Authentication for Network Devices

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Network devices often limit user access by supporting only one authentication method per port, preventing devices that don't support that method from connecting, even if they could be authenticated using a different supported method, leading to delayed connections and reduced accessibility.

Innovation Solution

A network device capable of supporting multiple authentication methods simultaneously on a single port, determining the appropriate method for each user device based on its authentication history and capabilities, allowing for concurrent authentication of multiple devices using different methods.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If a network device supports only one authentication method per port, then the device complexity is reduced and operation is simplified, but the adaptability to different device authentication capabilities deteriorates and user access is limited

Engineering Contradiction:

Improveauthentication method compatibilityVSAvoidauthentication system complexity

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent segments the authentication process by creating separate authentication components for different authentication methods (e.g., Portal authentication component, 802.1X authentication component). Each component handles a specific authentication method independently, allowing the system to support multiple methods simultaneously without increasing overall complexity. The segmentation enables selective activation of authentication methods based on user device capabilities.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The network device port is designed with multi-functionality to support multiple authentication methods concurrently. The authentication system can dynamically select and apply different authentication methods (Portal, 802.1X, MAC authentication) based on the capabilities of each user device, making the single port universal in its ability to authenticate diverse devices with different authentication requirements.

Inventive Principle:

Principle #6Universality (Multi-functionality)

2Productivity

If a network device supports only one authentication method per port, then the ease of operation is improved, but the productivity in terms of connection establishment speed deteriorates due to delayed connections

Engineering Contradiction:

Improveconnection establishment speedVSAvoidauthentication configuration simplicity

Core Design Contradiction:

ProductivityVSEase of operation

Solution Approach 1:

The system performs preliminary actions by pre-configuring multiple authentication methods and their corresponding components in advance. When a user device connects, the system can immediately evaluate which pre-configured authentication method to use based on the device's capabilities, eliminating the need for sequential trial-and-error authentication attempts and significantly reducing connection establishment time.

Inventive Principle:

Principle #10Preliminary action

3Adaptability or versatility

If a network device limits authentication to one method per port, then the device complexity is reduced, but the adaptability to accommodate different device authentication capabilities deteriorates

Engineering Contradiction:

Improvedevice authentication capability supportVSAvoidauthentication processing complexity

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The authentication system is designed to be dynamic, automatically selecting and switching between different authentication methods based on real-time assessment of user device capabilities. The system can dynamically activate the appropriate authentication component (Portal, 802.1X, or MAC authentication) without requiring manual reconfiguration, thereby adapting to diverse device capabilities while maintaining manageable complexity through automated decision-making logic.

Inventive Principle:

Principle #15Dynamics

Data Source

PatentUS11562062B1Supporting multiple authentication methods on a port of a network device at the same time

Publication Date: 2023.01.24 JUNIPER NETWORKS INC

AI summary

A network device may receive, via a single port of the network device, a connection request from a user device and may obtain, based on the connection request, information related to an authentication history of the user device. The network device may determine, based on the information related to the authentication history of the user device, an authentication method to be used by the network device to authenticate the user device and may determine, using the authentication method, that the user device is authenticated. The network device may establish, based on determining that the user device is authenticated, an authenticated communication session with the user device on the single port of the network device. The network device may determine, using an additional authentication method, that an additional user device is authenticated and may establish an additional authenticated communication session with the additional user device on the single port.