Network Authentication Extensions for Custom Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Network authentication systems lack the ability to easily accommodate unique or custom authentication requirements, such as checking devices against specific databases or setting up credentials for third-party systems, without compromising security or stability.

Innovation Solution

The introduction of network authentication system extensions, which are self-contained modules that provide additional functionality beyond the basic network authentication system, allowing for custom instructions to be packaged and executed while isolating access through controlled points, ensuring security and resource control.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If custom authentication instructions are integrated into the core network authentication system, then authentication versatility is improved, but system complexity and security risk increase

Engineering Contradiction:
Improveauthentication versatilityVSAvoidsystem complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent segments the authentication system into a core system and separate extension modules. Custom authentication instructions are packaged as isolated extensions that do not modify the core system structure. This allows versatility to be improved through additions while the core system remains simple and maintainable.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces an intermediary extension loading mechanism that sits between the core authentication system and custom instructions. This intermediary manages the loading, isolation, and execution of custom extensions, allowing versatility without directly increasing core system complexity.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Adaptability or versatility

If custom authentication extensions are allowed to access the core system freely, then functionality is improved, but security and stability deteriorate

Engineering Contradiction:
Improvecustom functionalityVSAvoidsystem stability
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The patent separates extension code from the core system into isolated compartments. Extensions run in isolated contexts with limited access to core system resources, preventing unstable or malicious extensions from compromising overall system reliability while still enabling custom functionality.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent applies different access control qualities to different parts of the system. The core system maintains strict security and stability properties, while extension areas allow greater flexibility. This local differentiation enables custom functionality without sacrificing core system reliability.

Inventive Principle:
Principle #3Local quality

3Reliability

If extensions are isolated from the core system, then security is improved, but ease of operation and integration worsen

Engineering Contradiction:
ImprovesecurityVSAvoidintegration ease
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent introduces standardized intermediary interfaces that mediate between isolated extensions and the core system. These interfaces provide simple, consistent methods for extensions to interact with authentication functionality, making integration easy despite security-based isolation.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent creates universal extension interfaces that work with all authentication types through a common protocol. This allows extensions to be easily created and integrated without needing to understand or directly access complex core system internals, maintaining both security and ease of operation.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS10469473B2Network authentication system extensions
Publication Date: 2019.11.05 HEWLETT PACKARD ENTERPRISE DEV LP
  • US10469473B2 patent drawing
  • US10469473B2 patent drawing
  • US10469473B2 patent drawing

AI summary

Example implementations relate to network authentication system extensions. For example, network authentication system extensions may be installed and executed using a system. The system may comprise a processing resource and a memory resource storing readable instructions. The instructions may cause the processing resource to initiate an extension system and initiate an application programming interface (API) to manage a plurality of installed extensions in the extension system, where the installed extensions operate on a network authentication system. The instructions may also cause the processing resource to define a particular instance of an installed extension among the plurality of installed extensions and execute installed extensions on the network authentication system.