Multi-Cloud Cellular Authentication With Local Credential Caching
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In multi-site 5G networks, reliance on cloud-based credential management disrupts local operations when connectivity is lost, as on-premises networks halt without access to the cloud authentication function, necessitating replicated credential databases with complex lifecycle management.
Innovation Solution
Implement local authentication at each site using cached credential information with a Time To Live (TTL) value, refreshing and updating credentials upon reconnection to the cloud, and eliminating the need for replicated databases.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If cloud-based credential management is used for authentication, then centralized security control is improved, but service availability deteriorates when cloud connectivity is lost
Solution Approach 1:
The authentication system is segmented into cloud-based credential management and local authentication capabilities. Each site controller stores credential information locally and can perform authentication independently when cloud connectivity is unavailable, while still maintaining centralized security control through periodic cloud synchronization.
Solution Approach 2:
Credential information is preliminarily stored at local site controllers before connectivity loss occurs. This preliminary action enables authentication to continue locally without cloud connectivity, maintaining service availability while preserving centralized security control through subsequent cloud synchronization.
2Reliability
If local authentication is implemented at each site, then service availability during connectivity loss is improved, but credential management complexity increases
Solution Approach 1:
Instead of replicating the complete credential database at each site, only partial credential information necessary for local authentication is stored. This reduces the complexity of distributed credential storage while maintaining authentication continuity during cloud connectivity loss.
3Adaptability or versatility
If credential databases are replicated across multiple sites, then authentication independence is improved, but storage requirements and synchronization complexity increase
Solution Approach 1:
Each site controller stores credential information with local quality tailored to its specific authentication needs, rather than replicating the entire centralized database. This enables authentication independence while minimizing storage requirements and synchronization complexity through selective local credential caching.
Data Source
AI summary
Disclosed herein are systems, methods, and computer-readable media for authentication in a multi-cloud cellular service. In one aspect, a method includes receiving, at a controller of a local site within the multi-cloud cellular service, a network connection request from a device, the cloud-based authentication component being a central network component configured to store device credentials and network policies for authenticating devices connecting to the multi-cloud cellular service across all sites associated with the multi-cloud cellular service. In one aspect, the method also includes locally authenticating, by the controller, the device using stored credential information obtained from the cloud-based authentication component prior to losing the connectivity to the cloud-based authentication component.